1/5 [#OSINT|#WORDPRESS] For anyone who's been following my previous tweets over the last few days, I'm going to show you how its possible to identify someone who's commented on Wordpress website by leveraging Gravatar and Email Address Hashing.
2/5 if we visit the following link, and scroll down to the bottom, we can see many users have engaged with the authors post as shown in the image below.
isitwp.com/display-commen…
isitwp.com/display-commen…
3/5 Starting with "Erick" we want to copy the Url of his profile image and paste it in to notepad or something similar. We then want to identify the part which is the md5 hash of his email address. After "/" and before "?"
4/5 Now we have the md5 hash we simply do a search against the Rainbow Table which is a lookup table of a few billion email addresses and the md5 hash.
I've helped Erick out a bit by blurring some of his Email Address.
I've helped Erick out a bit by blurring some of his Email Address.
5/5 In the next couple of weeks i will be looking to make my Rainbow Table of more than 3+ Billions emails searchable via the md5 hash.
• • •
Missing some Tweet in this thread? You can try to
force a refresh
