Anda di halaman 1dari 19

Ape-Testing, LLC

Passive Reconnaissance of Petco P.2

2.11.2018 This Report was Prepared By: Taco Lemur Security Nicolas Bautista Jaime Ibarra Alyssa Evans nicbauti@uat.edu
2.11.2018
This Report was Prepared By:
Taco Lemur Security
Nicolas Bautista
Jaime Ibarra
Alyssa Evans
nicbauti@uat.edu
jaiibarr@uat.edu
alyevans@uat.edu

Table of Contents

Introduction ................................................................................................................................................... 2 Overview ....................................................................................................................................................... 2 Key Employees ............................................................................................................................................. 2 Other Company Information ......................................................................................................................... 7 Visual
Introduction ...................................................................................................................................................
2
Overview
.......................................................................................................................................................
2
Key Employees
.............................................................................................................................................
2
Other Company Information
.........................................................................................................................
7
Visual Map & Maltego Results
.....................................................................................................................
7
Netcraft Results .............................................................................................................................................
8
Suspected
Network
Ranges
Petco.com
.........................................................................................................
9
Suspected Network Ranges Unleashedbypetco.com
....................................................................................
9
Other Hosts
DNS Enumeration
...................................................................................................................................................
9
.......................................................................................................................................
10
Banner Grabbing
.........................................................................................................................................
13
Advanced Search Strings
Success...............................................................................................................
18
Advanced Search Strings Success No Good Results
..................................................................................
18
Tools/Websites Used
..................................................................................................................................
18

Introduction

Taco Lemur Security Team were tasked with obtaining more information on the organization previously chosen and documenting the results. PETCO Animal Supplies Stores, Inc. was further researched with key employees in mind. The results found below were gained legally and as unobtrusively as possible given the objective.

Overview The purpose of this phase was to gain a better insight to PETCO and its
Overview
The purpose of this phase was to gain a better insight to PETCO and its employees. Knowing the
chain of command as well as their personal lives allow for us to better gain an idea of what kind
of person they are. This is good to know if we were to approach them in the hopes of gleaning
more information from them. Diagramming their network and continuing to verify if anything is
added to determine if there is anything new or vulnerabilities that will appear. The google search
strings are useful ways to access this information that is already available to the public.
Key Employees
Jim Myers: Chairman & Chief Executive Officer
Age: 58
Total Calculated Compensation as of Fiscal Year 2014: $2,739,225
Married to Josie Myers
E-mail: jim.myers@petco.com
Joined in 1990
First assignment was Vice President and Controller
Promoted to Executive Vice President and Chief Financial Officer in 1998
Elected to Board of Directors in 2000
Promoted to Chief Executive Officer in 2004
Added Chairman in 2015
Previous Employment
o
o
o
o
o
o
o
o
o
o
o
Senior Audit Manager at KPMG
Education
o
John Carroll University
BS, Accounting
Serves Board Position
o
Retail Industry Leaders Association
John Carroll University
San Diego-based Jack in the Box
Brad Weston: President of Unleashed & Chief Merchandising Officer at Petco
Location: La Jolla, California
Previous Employment
o
o
  • Senior Vice President & Chief Merchandising Officer at Dick's Sporting Goods

  • Senior Vice President & Chief Merchandising Officer at Golf Galaxy

o

  • Senior Vice President & General Merchandise Manager at May Company Education

    • University of California, Berkeley

BS, Business Administration Mike Nuzzo: EVP, Chief Financial Officer Age: 48 Location: Pittsburgh, Pennsylvania Previous Employment

o

o

o

  • Chief Administrative Officer and EVP Business Development at 4moms

EVP and CFO at GNC.  Leadership roles at Abercrombie & Fitch Education:  o 
EVP and CFO at GNC.
Leadership roles at Abercrombie & Fitch
Education:
o
University of Chicago Booth School of Business
MBA, accounting and Finance
o
o
o
o
o
o
Kenyon College
BS, Economics
Phone: 502-384-9174
Petco Email: miken@petco.com
Alternate Email: Mike.Nuzzo@petco.com
Facebook link: https://www.facebook.com/mike.nuzzo.54
LinkedIn: https://www.linkedin.com/in/mike-nuzzo-63237510
Joined in Petco 2015
Family
o
Married: Shauna Nuzzo
Nurse Practitioner at Children's Hospital of Pittsburgh of UPMC
Worked at Nationwide Children's Hospital
Studied at John Carroll University Cleveland, Ohio
From Pittsburgh Pennsylvania
Wife Family members
Michael La Guardia
Lisa La Guardia
o
o
4 Children
2 Play Soccer.
Charlie Piscitello: SVP, Chief People Officer & President of PETCO Foundation
Age: 53
Total Calculated Compensation as of Fiscal Year 2014: $962,254
Location: San Diego, California
Board of Trustees Member
o
o
o
o
HABRI foundation (Human Animal Bond Research Initiative)
Pet Industry Leaders Council
Co-chair of Chief Hum Resource Officers Council for the Retail Industry Leaders
Association
Chair Elect and Board Member for the North San Diego Business Chamber of
Commerce
Founding member of the i4cp Chief Human Resource Officers board
Previous Employment
o
o
o
o
  • Boston Scientific

  • First Data

  • Gateway Inc.

  • Coors Brewing Company

o

  • Abbott Laboratories Education

   Marquette University BS, Communication Razia Richter: SVP, Chief Customer Officer Age: 52 Location:
Marquette University
BS, Communication
Razia Richter: SVP, Chief Customer Officer
Age: 52
Location: San Diego, California
Joined in 1991
Roles
o
o
o
o
Store Operations
Inventory Management
Analytical Services
Business Development
Company Controller
Promoted to current role in 2012
Previous Employment
o
o
KPMG US
Education
o
University of San Diego
Master of Business Administration (MBA), Business
San Diego State University-California State University
Bachelor of Business Administration (BBA), Accounting
Woodside High School
Rebecca Frechette: SVP, Merchandising
Location: Greater San Diego Area
Previous Employment
o
o
Senior Vice President of Merchandising at 7-Eleven
Merchandising, planning, and private brand leadership at Target
Accenture
Education
o
Purdue University
MBA, International Marketing and Finance
Marquette University
University of Wisconsin-Eau Claire
BA, Organizational Communication
Social Media information https://www.facebook.com/rebecca.c.frechette
o
Married to Brian Frechette https://www.facebook.com/brian.frechette
Went to Onalaska High School
Green bay packer Fan
Not Voting for Hillary Clinton
  • One Daughter

  • Dog Named Jake https://www.facebook.com/jake.frechette.3

Steve Lossing: SVP, Operations Location: San Diego, California From: Mechanicsburg, Pennsylvania

o

o

o

Serves Board of Directors for Petco Foundation

o

Previous Employment

  • The Foundry Big & Tall Supply Co.

  • Merchandise Leadership positions at J.C. Penney

  • Merchandise Leadership positions at Saks Incorporated

  • Merchandise Leadership positions at Elder-Beerman Department Store

Merchandise Leadership positions at May Department Stores Education  o  Penn State University BS, Marketing
Merchandise Leadership positions at May Department Stores
Education
o
Penn State University
BS, Marketing
Cumberland Valley High school
Social Media information
o
Married to Karen lossing https://www.facebook.com/karen.lossing.7
Children
o
Evan lossing https://www.facebook.com/evan.lossing
Lives in McKinney, Texas
Libby Lossing https://www.facebook.com/libby.lossing
Studying at UCLA
In the UCLA chapter of Alpha Delta Pi
Proud Texan Girl.
o
o
o
Mother: Yvonne Lossing https://www.facebook.com/ylossing
Lives in Cincinnati
Michael Zuna: SVP, Chief Marketing & Digital Officer
Age: 47
Location: San Diego, California
Previous Employment
o
o
o
Executive Vice President and Chief Marketing Officer at Aflac
Managing Director at Saatchi & Saatchi
Leadership roles at Arnold Worldwide
Leadership roles at Ogilvy & Mather
Education
o
United States Naval Academy
BS, Economics
Ranked 31 st in Forbes of the world's most influential CMOs
Social Media Information
o
Lives in Rancho santa Fe, California Su
Has two Daughters
Jodi Watson: SVP, Petco Direct
Location: San Diego, California
Previous Employment
o
o
President, Consumer Direct at Wolverine World Wide
Bag Borrow or Steal
  • Leadership positions at Williams-Sonoma, Inc.

o

  • Leadership positions at Eddie Bauer Education

    • IIT Institute of Design, Chicago Masters, Human Centered Designs (Design Methods)

o

  • Portland State University BA, Business Social Media Information

  • Maiden name Stahlnecker

  • Other Websites

http://www.wolverineworldwide.com  http://www.merrell.com  http://Www.hushpuppies.com  http://Www.chacousa.com  http://Www.sebago.com  http://Www.wolverine.com  Outspoken about women being
http://www.wolverineworldwide.com
http://www.merrell.com
http://Www.hushpuppies.com
http://Www.chacousa.com
http://Www.sebago.com
http://Www.wolverine.com
Outspoken about women being aware or sexual harassment.
John Carcasi: SVP, Supply Chain & Merchandise Planning
Age: 46
Location: San Diego, California
Previous Employment
o
o
o
Merchandising Leadership positions at JCPenny
Tootsies
The Childrens Collection
Foleys Department Store
Education
o
Texas A&M University
Master of Business Administration (M.B.A.), Retailing and Retail
Operations
Bachelor of Arts (BA), History
Stephen F. Austin State University
Bachelor of Arts (B.A.), History
Brian K. Devine: Chairman Emeritus and Director, Petco Holdings, Inc.
Age: 74
Total Calculated Compensation: $262,797
Location: San Diego, California
Previous employment
o
o
o
o
Krause's Sofa Factory
Toys R Us
Department of Health, Education, and Welfare
Education
o
Georgetown University
Bachelor of Arts (B.A.), Economics
American University
Graduate Statistics
Yale University
Graduate Statistics
Email: briand@petco.com
Phone #: 800-765-9878
Secretary's #: 888-583-6044 ext. 3046
Fax #: 858-677-3033
Address: 9125 Rehco Rd., San Diego, CA 92121-2270
o
o
o
o
o

Nettie Pedro: Region 4 Companion Animal Coordinator Location: Garland, TX Previous employment Email: nettiep@petco.com Phone #: 972-276-4435 ext. 214 Fax #: 972-276-4363 Tool Free Voicemail: 888-583-6044 ext. 4088 Address: 850 South Jupiter Rd., Suite 100, Garland, TX 75042-7781

o

o

o

o

o

o o Other Company Information From what we can determine, none of the employees are looking
o
o
Other Company Information
From what we can determine, none of the employees are looking for a job. Based on some of the
employee’s length of employment, it is assumed that they are very invested in PETCO. We were
able to discover Court Information pertaining to Pursuant to Stipulation v. Corporation doing
business as PETCO stores. PETCO’s associates include Pet Industry Sustainability Coalition
(PISC), Second Change Humane Society, CVC Capital Partners
Host
New?
av.petco.com
news.petco.com
webmail.petco.com
petfinder.petco.com
meet.petco.com
m.petco.com
petco.com
citrix.petco.com
video.petco.com
partners.petco.com
secure.petco.com
careers.petco.com
about.petco.com
community.petco.com
stores.petco.com
unleashedbypetco.com
Yes
(Major Shareholder), Instacart (PetcoNow), Partners for Pets, and
Unleashed (Owned by PetcoNow).
Yes
Yes
Visual Map & Maltego Results
Yes
Yes
Yes
No
No
No
No
No
No
No
No
No
No
ns45.domaincontrol.com
No
ns46.domaincontrol.com
No
mailstore1.secureserver.net
No
smtp.secureserver.net
No
Nettie Pedro: Region 4 Companion Animal Coordinator Location: Garland, TX Previous employment Email: <a href=nettiep@petco.com Phone #: 972-276-4435 ext. 214 Fax #: 972-276-4363 Tool Free Voicemail: 888-583-6044 ext. 4088 Address: 850 South Jupiter Rd., Suite 100, Garland, TX 75042-7781 o o o o o  o o Other Company Information From what we can determine, none of the employees are looking for a job. Based on some of the employee’s length of employment, it is assumed that they are very invested in PETCO. We were able to discover Court Information pertaining to Pursuant to Stipulation v. Corporation doing business as PETCO stores. PETCO’s associates include Pet Industry Sustainability Coalition (PISC), Second Change Humane Society, CVC Capital Partners Host New? av.petco.com news.petco.com webmail.petco.com petfinder.petco.com meet.petco.com m.petco.com petco.com citrix.petco.com video.petco.com partners.petco.com secure.petco.com careers.petco.com about.petco.com community.petco.com stores.petco.com unleashedbypetco.com Yes (Major Shareholder), Instacart (PetcoNow), Partners for Pets, and Unleashed (Owned by PetcoNow). Yes Yes Visual Map & Maltego Results Yes Yes Yes No No No No No No No No No No ns45.domaincontrol.com No ns46.domaincontrol.com No mailstore1.secureserver.net No smtp.secureserver.net No 7 | P a g e " id="pdf-obj-7-20" src="pdf-obj-7-20.jpg">
Netcraft Results Hosting Netblock Client- Site OS Web Server Server-Side Country Owner Side Akamai Java Servlet
Netcraft Results
Hosting
Netblock
Client-
Site
OS
Web Server
Server-Side
Country
Owner
Side
Akamai
Java Servlet
petco.com
Netherlands
Linux
AkamaiGHost
JavaScript
Tech.
SSL
Perl
United
CGI
vdi.petco.com
Petco
unkown
unkown
JavaScript
States
Applications
SSL
United
F5 BIG-
stores.petco.com
Rio SEO
Apache
N/A
JavaScript
States
IP
United
F5 BIG-
Java Servlet
partners.petco.com
Petco
unkown
JavaScript
States
IP
SSL
United
PR
Apache
about.petco.com
unkown
PHP (Piwik)
JavaScript
States
Newswire
Facebook Lite
PHP
United
Footprint
XML
careers.petco.com
Level 3
Linux
JavaScript
States
V4.11
SSL
WordPress
United
Lithium
F5 BIG-
community.petco.com
Apache
SSL
JavaScript
States
Tech, Inc.
IP
Akamai
Microsoft-
petco.shoplocal.com
Europe
Linux
N/A
JavaScript
Tech.
IIS/8.5
United
vpn.petco.com
Petco
unkown
unkown
N/A
N/A
States
Akamai
Java Servlet
secure.petco.com
Netherlands
Linux
AkamaiGHost
JavaScript
Tech.
SSL
Apache/2.2.15
marketing02.petco.com.mx
Mexico
Megacable
Linux
PHP
JavaScript
(Red Hat)
United
Amazon.com,
Apache/2.2.3
video.petco.com
Linux
PHP
JavaScript
States
Inc.
CentOS
United
av.petco.com
Petco
unknown
NA
NA
NA
States
United
PR
news.petco.com
unknown Apache
PHP
JavaScript
States
Newswire
United
webmail.petco.com
Petco
unknown
NA
NA
NA
States
United
F5 BIG-
Microsoft-
Image
petfinder.petco.com
Petco
ASP.NET
States
IP
IIS/6.0
Map
United
meet.petco.com
Petco
unkown
NA
NA
NA
States
Akamai m.petco.com Netherlands Linux Apache Java Servlet JavaScript Tech. Suspected Network Ranges Petco.com Petco Corporate IP
Akamai
m.petco.com
Netherlands
Linux
Apache
Java Servlet
JavaScript
Tech.
Suspected Network Ranges Petco.com
Petco Corporate IP Range: 69.195.220.192 /26 (DNS Enumeration)
Petco Corporate IP Range: 209.203.77.0 /24 (WHOIS)
Petco Corporate IP Range: 68.66.163.48 /29 (WHOIS)
Petco Corporate IP Range: 65.117.57.128 /27 (WHOIS)
Petco Corporate IP Range: 68.232.225.208 /29 (WHOIS)
Petco Corporate IP Range: 72.91.2.208 /29 (WHOIS)
Petco Corporate IP Range: 209.150.72.0 /23 (WHOIS)
Petco Corporate IP Range: 68.232.225.208 /29 (WHOIS)
Petco Corporate IP Range: 68.66.163.48 /29 (WHOIS)
Petco total number of available host IPs: 886
Third Party DNS Service (name servers) IP Range: 156.154.0.0 /16 (WHOIS / DNS
Enumeration)
Third Party Email Service (MX servers) IP Range: 67.231.144.0 /20 (WHOIS /DNS
Enumeration)
Suspected Network Ranges Unleashedbypetco.com
Unleashedbypetco GoDaddy Hosting IP Range: 184.168.0.0 /16 (WHOIS / DNS Enumeration)
Unleashedbypetco GoDaddy Hosting IP Range: 68.178.128.0 /17 (WHOIS / DNS Enumeration)
Unleashedbypetco GoDaddy Hosting IP Range: 72.167.0.0 /16 (WHOIS / DNS Enumeration)
Other Hosts
vpn.petco.com – IP: 209.203.77.29 – Reverse: static.twtelecom.net
Secure.petco.com – 184.85.78.9 – Reverse: static.akamaitechnologies.com (proxy service)

DNS Enumeration

 Main domain: petco.com o petco.com A: 204.74.99.100 – crs.ultradns.net (proxy service) www.petco.com A: 23.43.185.237 –
Main domain: petco.com
o petco.com A: 204.74.99.100 – crs.ultradns.net (proxy service)
www.petco.com A: 23.43.185.237 – akamaitechnologies.com (proxy service)
NS: sdns67.ultradns.net – 156.154.141.67 – sdns67.ultradns.net (Neustar DNS
service)
NS: sdns67.ultradns.com – 156.154.140.67 – sdns67.ultradns.com (Neustar DNS
service)
NS: sdns67.ultradns.org – 156.154.143.67 – sdns67.ultradns.org (Neustar DNS
service)
NS: sdns67.ultradns.biz – 156.154.142.67 – sdns67.ultradns.biz (Neustar DNS
service)
MX: mx0b-00004901.pphosted.com – 67.231.152.174 (Proofpoint Email service)
MX: mx0a-00004901.pphosted.com – 67.231.144.212 (Proofpoint Email service)
o
o
o
o
o
o
o
Subdomain: vdi.petco.com
A: vdi.petco.com – 69.195.220.235 – No reverse (possible corporate IP)
o
 Subdomain: stores.petco.com A: lb.gravitystream.com – 184.106.1.186 – No reverse (SEO Analytics service) o  Subdomain:
Subdomain: stores.petco.com
A: lb.gravitystream.com – 184.106.1.186 – No reverse (SEO Analytics service)
o
Subdomain: partners.petco.com
A: partners.petco.com – 69.195.220.200 – No reverse (possible corporate IP)
o
Subdomain: about.petco.com
A: roomssite.gtm.prnewswire.com – 199.230.28.57 – No reverse (Multimedia
service)
o
Subdomain: careers.petco.com
A: cdn.findly.com.c.footprint.net – 8.254.233.254 – No reverse (MarkMonitor
Brand Protection service)
o
Subdomain: community.petco.com
A: petco.lithium.com – 208.74.205.252 – Petco.lithium.com (Lithium Community
Site service)
o
 Subdomain: petco.shoplocal.com o A: a921.g.akamai.net – 70.96.0.81 – No reverse (proxy service) A: a921.g.akamai.net –
Subdomain: petco.shoplocal.com
o A: a921.g.akamai.net – 70.96.0.81 – No reverse (proxy service)
A: a921.g.akamai.net – 70.96.0.83 – No reverse (proxy service)
o
Second domain: unleashedbypetco.com
A: unleashedbypetco.com – 184.168.221.1 – ip.secureserver.net (GoDaddy)
NS: ns46.domaincontrol.com – 208.109.255.23 – ns46.domaincontrol.com
(hosting service)
o
o
o
o
o
NS: ns45.domaincontrol.com – 216.69.185.23 – ns45.domaincontrol.com (hosting
service)
MX: mailstore1.secureserver.net – 68.178.213.244 – ip.secureserver.net
(GoDaddy)
MX: smtp.secureserver.net – 72.167.238.29 – prod.phx3.secureserver.net
(GoDaddy)

Banner Grabbing

Main domain: www.petco.com GET & HEAD \ HTTP\1.0 & 1.1– “Bad Request” (NetCat 80)

o

 

o

System/OS: AkamaiGHost HTTP Acceleration/Mirror service

  • Anti-fingerprinting load balancer / cache server

 Subdomain: vdi.petco.com GET & HEAD & OPTIONS \ HTTP\1.0 & 1.1 – “302 Object Moved
Subdomain: vdi.petco.com
GET & HEAD & OPTIONS \ HTTP\1.0 & 1.1 – “302 Object Moved Location:
o
o
o
https” (NetCat 80)
GET & HEAD & OPTIONS \ HTTP\1.0 & 1.1– “No Response” (NetCat 443)
System/OS: Unknown
Subdomain: stores.petco.com
GET & HEAD & OPTIONS \ HTTP\1.0 & 1.1 – “Bad Request” (NetCat 80)
System/OS: Apache
o
o

Subdomain: partners.petco.com

o

o

o

GET & HEAD & OPTIONS \/ HTTP\1.0 & 1.1 – “OK” (NetCat 80)

GET & HEAD & OPTIONS \ HTTP\1.0 & 1.1 – “No Response” (NetCat 443)

System/OS: Unknown

 Subdomain: about.petco.com GET & HEAD & OPTIONS \ HTTP\1.0 & 1.1 – “Not Found” (NetCat
Subdomain: about.petco.com
GET & HEAD & OPTIONS \ HTTP\1.0 & 1.1 – “Not Found” (NetCat 80)
System/OS: Unknown
o
o
Subdomain: careers.petco.com
GET & HEAD & OPTIONS \ HTTP\1.0 & 1.1 – “Bad Request” (NetCat 80)
o
o
System/OS: Footprint 4.11/FPMCP
Cache/Proxy server (anti-fingerprinting)
Subdomain: community.petco.com
GET & HEAD & OPTIONS \ HTTP\1.0 & 1.1 – “Bad Request” (NetCat 80)
System/OS: Apache
o
o

Subdomain: petco.shoplocal.com

o

GET & HEAD & OPTIONS \ HTTP\1.0 & 1.1 – “Bad Request” (NetCat 80)

o

System/OS: AkamaiGHost HTTP Acceleration/Mirror service

  • Anti-fingerprinting load balancer / cache server

 Subdomain: av.petco.com GET & HEAD & OPTIONS \ HTTP\1.0 & 1.1 – “No Response” (NetCat
Subdomain: av.petco.com
GET & HEAD & OPTIONS \ HTTP\1.0 & 1.1 – “No Response” (NetCat 443)
System/OS: Unknown
o
o
Subdomain: news.petco.com
GET & HEAD & OPTIONS \ HTTP\1.0 & 1.1 – “Not Found” (NetCat 80)
o
o
System/OS: Unknown
Subdomain: webmail.petco.com
NetCat port 25
System/OS: Windows
Service: Microsoft Exchange Server 2003/2008
o
o
o
 Subdomain: petfinder.petco.com GET & HEAD & OPTIONS \ HTTP\1.0 & 1.1 – “Bad Request” (NetCat
Subdomain: petfinder.petco.com
GET & HEAD & OPTIONS \ HTTP\1.0 & 1.1 – “Bad Request” (NetCat 80)
System/OS: Windows
Service: Microsoft-HTTPAPI/2.0 (Could be several things)
o
o
o
Subdomain: meet.petco.com
GET & HEAD & OPTIONS \ HTTP\1.0 & 1.1 – “No Response” (NetCat 443)
System/OS: Unknown
Service: Skype for Business
o
o
o
Subdomain: m.petco.com
o
o
GET & HEAD & OPTIONS \ HTTP\1.0 & 1.1 – “Bad Request” (NetCat 80)
System/OS: AkamaiGHost HTTP Acceleration/Mirror service
Anti-fingerprinting load balancer / cache server
 System/OS: Unknown Second domain: unleashedbypetco.com GET & HEAD & OPTIONS HTTP/1.0 & 1.1 – “OK”
System/OS: Unknown Second domain: unleashedbypetco.com
GET & HEAD & OPTIONS HTTP/1.0 & 1.1 – “OK” (NetCat 80)
System/OS: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
o
o
o
o
o
X-Powered-By: ASP.NET
OPTIONS: OPTIONS, TRACE, GET, HEAD, POST

Advanced Search Strings Success

 inurl:petco filetype:txt Discovered Petco court injunction on several malpractices including charging incorrect price, not complying
inurl:petco filetype:txt
Discovered Petco court injunction on several malpractices including charging
incorrect price, not complying with California pet store animal care act, poorly
treating animals, and more.
o
Inurl:petco.com OR inurl:Unleashedbypetco.com inurl:php
Shows many Petco web sites are using php
o
Advanced Search Strings Success No Good Results
inurl:petco filetype:txt OR filetype:pdf OR filetype:docx OR filetype:doc OR filetype:xls
Inurl:petco filetype:xlsx OR pptx
site:unleashedbypetco.com OR site:petco.com filetype:pdf intext:password
site:unleashedbypetco.com OR site:petco.com filetype:pdf intext:username
site:unleashedbypetco.com OR site:petco.com filetype:pdf intext:user
site:unleashedbypetco.com OR site:petco.com filetype:pdf intext:pass
inurl:petco inurl:admin | intext:admin
inurl:petco inurl:cp-admin
site:petco.com -site:community.petco.com -site:video.petco.com -site:careers.petco.com -
inurl:shop -inurl:PetcoStore "inside" OR “password”
Tools/Websites Used
Google
Netcraft
DNSStuff
NetCat
DnsEnum
BurpSuite
WHOIS (IANA, ARIN, Kali)
Registrant Info
Additional Network Identification
NetBlock Info
LinkedIn
o
o
o
Maltego
Petno-Petco
Bloomberg
Plps
Facebook
Twitter
Petco.com