Embed Size (px)
Citation preview
Job ReconnaissanceUsing Hacking Skills to Win the Job Hunt Game
Josh MorePresident and Peon, Eyra Security
CISSP, GIAC-GSLC Gold, GCIH, RHCE
Job Reconnaissance
Letters
CISSPGIAC-GSLC Gold
GIAC-GCIHACE
Expertise
Network ProtectionWeb Defense
Malware MitigationPatch ManagementBreach Prevention
Consulting
Me
Experience
Job Reconnaissance
Foundations
Job Reconnaissance
Going Public
Job Reconnaissance
When to Leave
Job Reconnaissance
On Résumés
Job Reconnaissance
On Cover Letters
Job Reconnaissance
Telling Stories
Job Reconnaissance
TalkingAbout
Yourself
Job Reconnaissance
Socially Engineering Your Audience
Job Reconnaissance
Targeting
Job Reconnaissance
Stop!
Ethics Time!
Job Reconnaissance
Job Reconnaissance
Other SearchEngines
Job Reconnaissance
Taking Notes
Job Reconnaissance
Automated Searching
Job Reconnaissance
Deeper Recon
Job Reconnaissance
Company Finances
Job Reconnaissance
Analyzing the Present
Job Reconnaissance
Digging the Past, Projecting the Future
Job Reconnaissance
ProfessionalAnalysis
Job Reconnaissance
Metaphor Mapping
Job Reconnaissance
Repositioning
Job Reconnaissance
Phone Meeting
https://xkcd.com/1329/
Job Reconnaissance
Portfolio
Job Reconnaissance
Visual Design
Job Reconnaissance
TotalCompensation
Job Reconnaissance
Interview Prep
Job Reconnaissance
The Actual Interview
Job Reconnaissance
The End Is Not The End
Job Reconnaissance
SalaryNegotiation
Job Reconnaissance
Giving Notice
Date
Boss NameBoss TitleAddress
Boss Name,
This is my formal notification that I amresigning from _______. Date will beMy last day of employment...
...renegotiate non-compete in exchangefor greater notice period...
Boss Name,
That job. The one you want me to do?
Oh, that is bullcrap!
And you know what I think?!
I think this whole thing is a SETUP!
That's right!
And you know what else?!
Screw you guys, I'm going home!
-Cartman
Good Idea Bad Idea
Job Reconnaissance
Counteroffers and Exit Interviews
Marianne Vitale’s “Burned Bridge”
Job Reconnaissance
ResourcesBasic SearchingAsk—ask.comBing –bing.comBlekko—www.blekko.comDuck Duck Go—duckduckgo.comGoogle –google.comIxquick –ixquick.comYacy—yacy.netYahoo –yahoo.comYandex—yandex.comYippy—search.yippy.com
Search Filters and ManipulationsBing Operators - msdn.microsoft.com/en-us/library/ff795620.aspxGoogle Hacks by Dornfest, Bausch and CalishainGoogle Hacking Volumes 1 and 2 by Long and others—1931836361 and 978597491761Google Operators -googleguide.com/advanced_operators_reference.htmlYahoo Operators - www.creativeconfusion.net/search_engines/yahoo-commands.html
Deep SearchingArk—ark.comClusty—clusty.comComplete Planet—aip.completeplanet.comContracting & Organizations Research Institute—cori.missouri.eduDeep Web Listing—deep-web.org/how-to-research/deep-web-search-enginesEntity Cube—entitycube.research.microsoft.comMarket Visual—www.marketvisual.comNNDB—nndb.comNNDB Mapper—mapper.nndb.comPeopleFinders—www.peoplefinders.comScirus—scirus.comSearch Engine Guide—www.searchengineguide.com/searchengines.htmlSocial—so.clSocial Mention—socialmention.comSpokeo—www.spokeo.comWolfram Alpha - www.wolframalpha.com
Niche SearchesBing Events Search—www.bing.com/events/searchGlassdoor - www.glassdoor.comGoogle Blog Search - www.google.com/blogsearchGoogle Code—code.google.comGoogle Groups—groups.google.comGoogle Maps—maps.google.comGoogle News search—news.google.comGoogle Patent Search—www.google.com/?tbm=ptsFollowTheMoney - www.followthemoney.orgLittleSis—littlesis.orgOpen Secrets—OpenSecrets.org Pushpin.py—bitbucket.org/LaNMaSteR53/pushpin
Automated SearchingThe Harvester—code.google.com/p/theharvestereSearchy –github.com/FreedomCoder/esearchyeSearchy-ng—github.com/FreedomCoder/ESearchy-ngeSearchy-mirai –github.com/FreedomCoder/esearchy_miraiFierce - ha.ckers.org/fierceFierce2 - trac.assembla.com/fierceFOCA—www.informatica64.com/foca.aspxMaltego by Paterva - www.paterva.com/web6/products/maltego.phpNameChk—namechk.comRecon-ng—bitbucket.org/LaNMaSteR53/recon-ng/wiki/HomeScythe—github.com/ChrisJohnRiley/ScytheThreat Agent –www.threatagent.com
Searching the FutureGoogle Trends—www.google.com/trendsRecorded Future—www.recordedfuture.com Silobreaker—www.silobreaker.comTrends Map—trendsmap.comWhat The Trend—whatthetrend.comYahoo Trending Now—news.yahoo.com/blogs/trending-now [H2] Searching the PastGoogle Cache—google.com (click “cached button”)Internet Archive’s ’Wayback Machine—archive.org/web/web.phpNeoDiggler—addons.mozilla.org/en-us/firefox/addon/neo-diggler
Job Reconnaissance
ResourcesSearch SuggestersGoogle Keywords—adwords.google.com/o/KeywordToolMW Thesaurus—www.merriam-webster.com/dictionary/thesaurusSEO Book—tools.seobook.com/keyword-tools/seobookSEO Central—www.seocentro.comThesaurus.com—thesaurus.comUber Suggest—ubersuggest.orgVisual Thesaurus—www.visualthesaurus.comWordTracker—freekeywords.wordtracker.com
Business-specific SearchBook of Lists—www.bookoflistsonline.comGoogle Finance—www.google.com/financeHoover’s—hoovers.comJigsaw—jigsaw.comRapLeaf—rapleaf.comSEC filings site—www.secinfo.comYahoo Finance—finance.yahoo.com
Hiding Your IdentityGolden Frog’s VyperVPN—www.goldenfrog.com/vyprvpnHideMyAss –hidemyass.comIPVanish—www.ipvanish.comRise Up—riseup.net/enThe Onion Router—www.torproject.org
Time ManagementFocus Booster—www.focusboosterapp.com/liveGetting Things Done: The Art of Stress-Free Productivity by Allen—0142000280Kimai—www.kimai.org/enPersonal Kanban: Mapping Work | Navigating Life by Benson and Barry - 1453802266Project Hamster—projecthamster.wordpress.com/aboutRescue Time—www.rescuetime.comThe 7 Habits of Highly Effective People by Covey—0743269519The Dip by Godin - 9781591841661The Now Habit by Fiore—1585425524Tomato—tomato.es
Task ManagementTrello—trello.comOutlook TasksGoogle Tasks—mail.google.com/mail/help/tasksRemember The Milk—www.rememberthemilk.comTasque—wiki.gnome.org/TasqueWunderlist—www.6wunderkinder.com/wunderlist
Bookmark TrackersDelicious—delicious.comDiigo—diigo.comPinboard—pinboard.in
Mind MappersBubbl.us—bubbl.usCoggle—coggle.itFreeMind—freemind.sourceforge.net/wiki/index.php/Main_PageMind 42—mind42.comMind Meister—www.mindmeister.comXMind—www.xmind.net
Note TakersEverNote—evernote.comGoogle Keep—drive.google.com/keepOneNote—office.microsoft.com/en-us/onenoteSoho Notes –www.chronosnet.com/Products/sohonotes.htmlSpring Pad—springpad.comZotero—www.zotero.org
RSS ReadersBloglines—www.bloglines.comDigg Reader—digg.com/readerFeedly—cloud.feedly.comThe Old Reader—theoldreader.com
[H2] Graphic DesignFontsFont Picker—www.fontpicker.netJulian Hansen’s Font Choice—julianhansen.com/files/infographiclarge_v2.pngKlixo Font Chooser—klixo.com/tools/font_chooser.htmlWordmark—wordmark.itColorsColllor—colllor.comColor Combos Color Grabber—www.colorcombos.com/grabcolors.htmlColor Scheme Designer—colorschemedesigner.comColor Palette Generator—www.degraeve.com/color-paletteLayout ToolsGimp—www.gimp.orgInkscape—Inkscape.orgLibreOffice—www.libreoffice.orgScribus—www.scribus.net/canvas/Scribus
Reference SourcesBing Images—www.bing.com/imagesCreative Commons—search.creativecommons.orgExaled—www.exalead.com/search/imageFlickr Search—www.flickr.com/searchGoogle Image Search—www.google.com/imghpPinterest Visual Résumés—pinterest.com/rtkrum/infographic-visual-resumesTinEye Reverse Image Search—www.tineye.comVisualize Me—vizualize.meYahoo Images—images.search.yahoo.com
[H1] Managing Money
[H2] NegotiationGetting to YES: Negotiating Agreement Without Giving In by Fisher, Ury and Patton—0143118757How to Read a Person Like a Book by Nierenberg, Calero and Grayson—9780757003141The Art of Negotiating by Nierenberg—156619816X[H2] Cost of Living CalculatorsCNN—money.cnn.com/calculator/pf/cost-of-livingBest Places—www.bestplaces.net/cost-of-living/BankRate—bankrate.com/calculators/savings/moving-cost-of-living-calculator.aspxSalary.com—swz.salary.com/costoflivingwizard/layoutscripts/coll_start.aspxPayscale—www.payscale.com/cost-of-living-calculator[H2] Getting HelpCE-L freelancers list—www.copyediting-l.infoFedEx Office—www.fedex.com/us/officeOfficeDepot Copy and Print - www.officedepot.com/a/design-print-and-shipOfficeMax Print Center—www.officemax.com/home/custom.jsp?id=m9540558
[H1] Social Skills
[H2] Networking Keywords“BNI”“Chamber of Commerce Events”“Jaycees”“Networking”“Rotary”“Toastmasters”“User Group <subject of interest>”[H2] Communication and General ImprovementDefinitive Book of Body Language by Pease and Pease—0553804723How To Win Friends and Influence People by Carnegie—1439167346On Writing Well: The Classic Guide to Writing Nonfiction by Zinsser—0060006641Orbiting The Giant Hairball: A Corporate Fool’s Guide to Surviving with Grace by MacKenzie—0670879835Presentation Zen: Simple Ideas on Presentation Design and Delivery by Reynolds—0321811984slide:ology: The Art and Science of Creating Great Presentations by Duarte—0596522347Social Engineering: The Art of Human Hacking by Hadnagy—0470639539Emotions Revealed: Recognizing Faces and Feelings to Improve Communication and Emotional Life by Ekman—0805083391What Every BODY is Saying: An Ex-FBI Agent's Guide to Speed-Reading People by Navarro and Karlins—0061438294Writing as Thinking by Jacobus—0023601604[H2] Interviewing and Job Hunting Techniques201 Best Questions To Ask On Your Interview by Kador—007138773060 Seconds and You're Hired! by Ryan - 0143112902Brag!: The Art of Tooting Your Own Horn without Blowing It by Klaus—0446692786Cracking the Coding Interview: 150 Programming Questions and Solutions by McDowell - 098478280XDon't Send a Resume: And Other Contrarian Rules to Help Land a Great Job by Fox—0786865962How to Land Your Dream Job: No Resume! And Other Secrets to Get You in the Door by Fox—1401303048How Would You Move Mount Fuji?: Microsoft's Cult of the Puzzle - How the World's Smartest Companies Select the Most Creative Thinkers by Poundstone—0316778494Nail the Job Interview!: 101 Dynamite Answers to Interview Questions by Krannich and Krannich—1593160232[H2] Storytelling and MetaphorI Is an Other: The Secret Life of Metaphor and How It Shapes the Way We See the World by Geary - 9780061710292Images of Organization by Morgan—1412939798Made to Stick: Why Some Ideas Survive and Others Die by Heath and Heath - 1400064287Master Metaphor List v2 –Lakoff, Espenson, Goldberg and Schwartz –araw.mede.uic.edu/~alansz/metaphor/METAPHORLIST.pdf Metaphors We Live By by Lakoff and Johnson—0226468011Pixar Story Rules by Coats—filmmakeriq.com/2012/08/the-pixar-story-rulesStory: Substance, Structure, Style, and the Principles of Screenwriting by McKee - 9780060391683The Golden Theme: How to make your writing appeal to the highest common denominator by McDonald—0984178678The Seven Basic Plots: Why We Tell Stories by Booker—0826480373The Stuff of Thought: Language as a Window into Human Nature by Pinker—0143114247The War of Art: Break Through the Blocks and Win Your Inner Creative Battles by Pressfield—1936891026Visual Explanations: Images and Quantities, Evidence and Narrative by Tufte—0961392126Visual Story Lab’s 2013 Report—www.resource-media.org/visual-story-lab/reportWhoever Tells the Best Story Wins: How to Use Your Own Stories to Communicate with Power and Impact by Simmons—0814409148Wired for Story: The Writer's Guide to Using Brain Science to Hook Readers from the Very First Sentence by Cron—1607742454[H2] Privacy LockdownGoogle—www.google.com/goodtoknow/online-safety/security-tools/Microsoft—www.microsoft.com/security/online-privacy/overview.aspxYahoo—security.yahoo.com/LinkedIn—www.linkedin.com/settings/Facebook—www.facebook.com/settings/?tab=privacy&privacy_source=settings_menuMySpace—www.myspace.com/my/settings/account/privacyLiveJournal—www.livejournal.com/manage/settings/?cat=privacySimpleWash—simplewa.shTwitter—twitter.com/settings/account
[H1] General BusinessWhile the challenges facing your targets will be quite specific to them, there are some general resources that can help you to understand more general market conditions, how businesses work, and how they fail.
Better: A Surgeon's Notes on Performance by Gawande—9780312427658Good to Great: Why Some Companies Make the Leap... and Others Don't by Collins—0066620996Let's Get Real or Let's Not Play: Transforming the Buyer/Seller Relationship by Khalsa and Illig—1591842263Selling the Invisible: A Field Guide to Modern Marketing by Beckwith—0446672319SPIN Selling by Rackham—0070511136The Innovator's Solution: Creating and Sustaining Successful Growth by Christensen and Raynor—1578518520The One Thing You Need to Know: ... About Great Managing, Great Leading, and Sustained Individual Success by Buckingham—0743261658What the CEO Wants You to Know : How Your Company Really Works by Charan—0609608398[H1] EthicsWhile your ethics are your own, it can be quite useful to know how others expect you to act. It will vary by geographic region and by specific industry. In general, GIAC and (ISC)2 focus on the ethical use of information in a business context. The other resources help you determine, more specifically, what ethics others might expect you to follow.(ISC)2 Code of Ethics—www.isc2.org/ethics/Default.aspxGIAC Code of Ethics—computer-forensics.sans.org/certification/ethicsEthics Resource Center Ethics Toolkit—www.ethics.org/page/ethics-toolkitDoD View—www.dod.mil/dodgc/defense_ethics/resource_library/resourcesindex.html
Job Reconnaissance
Resources
Getting HelpCE-L freelancers list—www.copyediting-l.infoFedEx Office—www.fedex.com/us/officeOfficeDepot Copy and Print - www.officedepot.com/a/design-print-and-shipOfficeMax Print Center—www.officemax.com/home/custom.jsp?id=m9540558
Networking Keywords“BNI”“Chamber of Commerce Events”“Jaycees”“Networking”“Rotary”“Toastmasters”“User Group <subject of interest>”
Communication and General ImprovementDefinitive Book of Body Language by Pease and Pease—0553804723How To Win Friends and Influence People by Carnegie—1439167346On Writing Wellby Zinsser—0060006641Orbiting The Giant Hairballby MacKenzie—0670879835Presentation Zen by Reynolds—0321811984slide:ology by Duarte—0596522347Social Engineering: The Art of Human Hacking by Hadnagy—0470639539Emotions Revealed by Ekman—0805083391What Every BODY is Saying by Navarro and Karlins—0061438294Writing as Thinking by Jacobus—0023601604
Interviewing and Job Hunting Techniques201 Best Questions To Ask On Your Interview by Kador—007138773060 Seconds and You're Hired! by Ryan - 0143112902Brag! by Klaus—0446692786Cracking the Coding Interview by McDowell - 098478280XDon't Send a Resume by Fox—0786865962How to Land Your Dream Job by Fox—1401303048How Would You Move Mount Fuji?—0316778494Nail the Job Interview! by Krannich and Krannich—1593160232
FontsFont Picker—www.fontpicker.netJulian Hansen’s Font Choice—julianhansen.com/files/infographiclarge_v2.pngKlixo Font Chooser—klixo.com/tools/font_chooser.htmlWordmark—wordmark.it
ColorsColllor—colllor.comColor Combos Color Grabber—www.colorcombos.com/grabcolors.htmlColor Scheme Designer—colorschemedesigner.comColor Palette Generator—www.degraeve.com/color-palette
Layout ToolsGimp—www.gimp.orgInkscape—Inkscape.orgLibreOffice—www.libreoffice.orgScribus—www.scribus.net/canvas/Scribus
Reference SourcesBing Images—www.bing.com/imagesCreative Commons—search.creativecommons.orgExaled—www.exalead.com/search/imageFlickr Search—www.flickr.com/searchGoogle Image Search—www.google.com/imghpPinterest Visual Résumés—pinterest.com/rtkrum/infographic-visual-resumesTinEye Reverse Image Search—www.tineye.comVisualize Me—vizualize.meYahoo Images—images.search.yahoo.com
NegotiationGetting to YESby Fisher, Ury and Patton—0143118757How to Read a Person Like a Book by Nierenberg, Calero and Grayson—9780757003141The Art of Negotiating by Nierenberg—156619816X[H2] Cost of Living CalculatorsCNN—money.cnn.com/calculator/pf/cost-of-livingBest Places—www.bestplaces.net/cost-of-living/BankRate—bankrate.com/calculators/savings/moving-cost-of-living-calculator.aspxSalary.com—swz.salary.com/costoflivingwizard/layoutscripts/coll_start.aspxPayscale—www.payscale.com/cost-of-living-calculator
Job Reconnaissance
ResourcesStorytelling and MetaphorImages of Organization by Morgan—1412939798Made to Stick: Why Some Ideas Survive and Others Die by Heath and Heath - 1400064287Master Metaphor List v2 –Lakoff, Espenson, Goldberg and Schwartz –araw.mede.uic.edu/~alansz/metaphor/METAPHORLIST.pdf Metaphors We Live By by Lakoff and Johnson—0226468011Pixar Story Rules by Coats—filmmakeriq.com/2012/08/the-pixar-story-rulesStory: Substance, Structure, Style, and the Principles of Screenwriting by McKee - 9780060391683The Seven Basic Plots: Why We Tell Stories by Booker—0826480373The Stuff of Thought: Language as a Window into Human Nature by Pinker—0143114247The War of Art: Break Through the Blocks and Win Your Inner Creative Battles by Pressfield—1936891026Visual Explanations: Images and Quantities, Evidence and Narrative by Tufte—0961392126Visual Story Lab’s 2013 Report—www.resource-media.org/visual-story-lab/reportWhoever Tells the Best Story Wins: How to Use Your Own Stories to Communicate with Power and Impact by Simmons—0814409148Wired for Story: The Writer's Guide to Using Brain Science to Hook Readers from the Very First Sentence by Cron—1607742454
Privacy LockdownGoogle—www.google.com/goodtoknow/online-safety/security-tools/Microsoft—www.microsoft.com/security/online-privacy/overview.aspxYahoo—security.yahoo.com/LinkedIn—www.linkedin.com/settings/Facebook—www.facebook.com/settings/?tab=privacy&privacy_source=settings_menuMySpace—www.myspace.com/my/settings/account/privacyLiveJournal—www.livejournal.com/manage/settings/?cat=privacySimpleWash—simplewa.shTwitter—twitter.com/settings/account
General BusinessBetter: A Surgeon's Notes on Performance by Gawande—9780312427658Good to Great: Why Some Companies Make the Leap... and Others Don't by Collins—0066620996Let's Get Real or Let's Not Play: Transforming the Buyer/Seller Relationship by Khalsa and Illig—1591842263Selling the Invisible: A Field Guide to Modern Marketing by Beckwith—0446672319SPIN Selling by Rackham—0070511136The Innovator's Solution: Creating and Sustaining Successful Growth by Christensen and Raynor—1578518520The One Thing You Need to Know: ... About Great Managing, Great Leading, and Sustained Individual Success by Buckingham—0743261658What the CEO Wants You to Know : How Your Company Really Works by Charan—0609608398
Ethics(ISC)2 Code of Ethics—www.isc2.org/ethics/Default.aspxGIAC Code of Ethics—computer-forensics.sans.org/certification/ethicsEthics Resource Center Ethics Toolkit—www.ethics.org/page/ethics-toolkitDoD View—www.dod.mil/dodgc/defense_ethics/resource_library/resourcesindex.html
Job Reconnaissance
Resources
You have just seen
Job Reconnaissance
Now, criticize me
Q&A
Stalk Me
t @Entropologist
www.eyrasecurity.com
