Linkedin2Username

Linkedin2Username

Credit to Jake Creps: LinkedIn is one of the greatest resources of open source information. Why? LinkedIn gives you so many data points to pivot from. LinkedIn gives you names, locations, employers, schools, coworkers, and sometimes even other social media handles just to name a few. One great OSINT application for LinkedIn is business intelligence. This is where LinkedIn2Username comes in handy within my workflow. Here's how I use it. LinkedIn2Username will take all of the names of people who work for a company and generate a list of possible usernames for those individuals that can be used to pivot across multiple social media profiles. The question is, which username is the right username? When looking at this from a business lens, this is a question that can be answered with a reasonable amount of certainty. Using Facebook at as an example, you'll find that @fb.com is the email structure at a ~74% confidence level. Now, pivoting to LinkedIn2Username, you can quickly pull the list of all Facebook employees and generate a list of potential email addresses for those employees. You'll get something like [mark@fb.com, sally@fb.com, jim@fb.com]. I'll likely do a Workflow Wednesday on my process for business OSINT in the near future. Make sure to subscribe to not miss out! Using a pretty standard workflow, you'll be able to verify if these emails you've generated are correct or not and begin to build out a valuable list of email addresses. Why would you use this? From a sales and marketing perspective, it can be extremely valuable. From a red team perspective, it can be the basis of mapping out a phishing campaign. From a blue team perspective, you can quickly learn your "OSINT vulnerability" and put steps in place to obfuscate email addresses for new employees, for example.