Search Open Websites/Domains
Technique · ATTACK:enterprise:T1593
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:T1593",
"title": "Search Open Websites/Domains",
"type": "Technique",
"source_url": "https://attack.mitre.org/techniques/T1593",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "attack-pattern--a0e6614a-7740-4b24-bd65-f1bde09fc365",
"external_id": "T1593",
"domain": "enterprise",
"created": "2020-10-02T16:48:04.509Z",
"modified": "2026-05-12T15:12:00.706Z",
"version": "1.1",
"aliases": [
],
"tactics": [
"reconnaissance"
],
"source_references": [
{
"source_name": "SecurityTrails Google Hacking",
"url": "https://www.recordedfuture.com/threat-intelligence-101/threat-analysis-techniques/google-dorks"
},
{
"source_name": "Cyware Social Media",
"url": "https://cyware.com/news/how-hackers-exploit-social-media-to-break-into-your-company-88e8da8e"
},
{
"source_name": "ExploitDB GoogleHacking",
"url": "https://www.exploit-db.com/google-hacking-database"
}
]
}Explicit source assertions (11)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:G0129 → uses → ATTACK:enterprise:T1593
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--20e34dcc-cf1f-4657-890b-8ee7658ba12a
IBM MUSTANG PANDA PUBLOAD CLAIMLOADER JUNE 2025 · 2025_IBM_PUBLOAD_TONESHELL_HIUPAN_CLAIMLOADER_MUSTANG PANDAATTACK:enterprise:T1593.002 → subtechnique-of → ATTACK:enterprise:T1593
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3be9d897-5a20-4e2f-8b73-2a69256925b0
ATTACK:enterprise:G1017 → uses → ATTACK:enterprise:T1593
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--50ffe9ed-aaf1-4b82-9dea-b15c2cb07225
CISA AA24-038A PRC Critical Infrastructure February 2024ATTACK:enterprise:G1052 → uses → ATTACK:enterprise:T1593
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c27ebf8d-15e3-4f3c-964c-e0ad5e8ca70a
Sentinel One Contagious Interview ClickFix September 2025ATTACK:enterprise:T1593.003 → subtechnique-of → ATTACK:enterprise:T1593
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cf1c2a1e-90f7-40b1-93a1-7acdffc9e183
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1593
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e8ba13f3-b51a-4e7b-9534-7f9f8d362b0c
ATTACK:enterprise:G0099 → uses → ATTACK:enterprise:T1593
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--eba94ce8-cfb7-415d-a990-10c91d90d3e2
LevelBlue Blind Eagle Proton66 JUN 2025ATTACK:enterprise:T1593.001 → subtechnique-of → ATTACK:enterprise:T1593
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ef1787e0-add4-4490-9777-33462acf9325
ATTACK:enterprise:M1013 → mitigates → ATTACK:enterprise:T1593
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f0c57085-ccd9-48d1-b35d-1b0f1ba80e96
ATTACK:enterprise:G0034 → uses → ATTACK:enterprise:T1593
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--fac15889-5e75-4d1d-b624-294581c299ca
US District Court Indictment GRU Unit 74455 October 2020ATTACK:enterprise:G1033 → uses → ATTACK:enterprise:T1593
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--fd7bcf0a-5546-4c0d-adcc-aff6963d06f5
CISA Star Blizzard Advisory December 2023 · Microsoft Star Blizzard August 2022