Mr. Hui and Elon Musk | Or a billionaire's company website for $12
Post about how to dig into metadata, check for data leaks, and find website connections using the Project bot for O.S.I.N.T. activities. In other words, this was done for fun and as an example.
🌍ChatGPT provided a list of websites associated with Elon Musk, including boringcompany.com.
The Boring Company - is an American infrastructure and tunnel construction company founded by Elon Musk.
Based on the search results in the metadata of the website documents via the Project bot, it was possible to identify one employee of this company - Tony Hui ("/menu" => "Information collection and metadata" => "Search in website documents").
Mr. Hui looks like this, and he holds the position of Environmental Transport Planner at The Boring Company. All information was taken from public sources.
As a true East Asian, he prefers semi-raw seafood, which he gladly shared on a joint YouTube channel with his wife.
🔎 In the channel description, his email was discovered - t*n**hui@gmail.com.
Through the reverse search of data ("/menu" => "Search for data leaks" => "Password by email"), leaked passwords were found:
A small life hack: How to determine a person's uniqueness? - by their password!
We go to the same section "/menu" => "Search for data leaks" and run passwords using a reverse method.
His password is truly unique, and only one match was found in the multi-million database, which confirms his ownership.
On the channel description page, his website was found.
Unfortunately, it was down, but SQUAERSPACE - a website builder, was noticed in the bottom corner.
A search for website connections ("/menu" => "IP / Site / DNS" => "Website Connection search") was conducted between boringcompany.com and squarespace.com, and it was found that boringcompany.com is closely linked to the website builder SQUAERSPACE.
Opening the source code of boringcompany.com, we can see SQUAERSPACE.
🏃♀️ Now we are one step closer to Elon Musk, and we know that Hui works for him. Also, we found out that one of the leading companies in infrastructure and tunnel construction, founded by Elon Musk, created a website using the SQUAERSPACE builder for $12.
The further digging has no point, the information is provided for educational and demonstration purposes only, and is not intended for malicious use.
I found it very strange that he is not following his employer, Elon Musk.
Project bot tools used:
1️⃣ The search in the website's document metadata is performed as follows: "/menu" => "Information and metadata gathering" => "Search in website documents."
2️⃣ The search for leaked data is performed as follows: "/menu" => "Data leak search" => "Password by email."
3️⃣ The search for website connections is performed as follows: "/menu" => "IP / Website / DNS" => "Website Connection search"