A Coffee in Paris

I'm sitting in a Cafe in Paris, I'm trying to get my bearings. I'm in a table in the corner so I can see the room but people can't see my laptop.

The wireless in here is fast, they even have guest isolation enabled.

I'm checking out a mission target network.

Normally I wouldn't do this here but one must do what one must. I'm using a VPN and the CCTV only covers the outside of the premises.

To everyone else I'm just an average Joe, I don't have any stickers on my laptop, I'm not running an OS that stands out.

I just blend in into the background.

The target has a typical posture on their infrastructure:

Weak email security DNS records (poor SPF configurationand missing DMARC/DKIM)

They seem to have a third party running their website, they don't have any obvious DoS protection/CDN.

The corporate site runs WordPress (this is quite a typical model).

They have SSH and a MYSQL DB exposed with password based auth.

Typical stuff really. I need to start looking at their corporate network perimeter and I have a ton of OSINT to do on the organisation and it's staff (and supply chain)

This isn't the movies…. this stuff takes a long time! (and I don't really have that!)

The yacht company is down the road… I need to shopping…