git clone https://github.com/infobyte/emploleaks.gitcd emploleakscd clipip install -r requirements.txtmacOS安装
cd clipython3 -m pip install psycopg2-binary`python3 cli/emploleaks.py___________ .__ .__ ___ _____/ _____ ______ | | ____ | | ____ _____ | | __ ______ | __)_ / ____ | | / _ | | _/ __ __ | |/ / / ___/ | Y Y |_> > |_( <_> ) |_ ___/ / __ | < ___ /_______ /__|_| / __/|____/____/|____/___ >____ /__|_ /____ > / /|__| / / / /OSINT tool to chain multiple apisemploleaks>检索Linkedin配置文件
emploleaks> use --plugin linkedinemploleaks(linkedin)> setopt JSESSIONIDJSESSIONID: [+] Updating value successfullemploleaks(linkedin)> setopt li-atli-at: [+] Updating value successfullemploleaks(linkedin)> show optionsModule options:Name Current Setting Required Description---------- ----------------------------------- ---------- -----------------------------------hide yes no hide the JSESSIONID fieldJSESSIONID ************************** no active cookie session in browser #1li-at AQEDAQ74B0YEUS-_AAABilIFFBsAAAGKdhG no active cookie session in browser #1 YG00AxGP34jz1bRrgAcxkXm9RPNeYIAXz3M cycrQm5FB6lJ-Tezn8GGAsnl_GRpEANRdPI lWTRJJGF9vbv5yZHKOeze_WCHoOpe4ylvET kyCyfN58SNNHemploleaks(linkedin)> run impersonate[+] Using cookies from the browserSetting for first time JSESSIONIDSetting for first time li_atemploleaks(linkedin)> run find EvilCorp⠙ Gathering Information[+] Added 1 new names.Listing profiles:0: full name: Joaquin Rodriguez Virulientoprofile name: joaquinrodriguezvirulientooccupation: Security Researcher at EvilCorppublic identifier: joaquinrodriguezvirulientourn: urn:li:member:15736913Getting and processing contact info of "Joaquin Rodriguez Viruliento"Contact info:website 0. http://www.evilcorp.comtwitter 0. limpiamicercaDone获取LinkedIn账号+泄露的密码
emploleaks(linkedin)> connect --user myuser --passwd mypass123 --dbname mydbname --host 1.2.3.4[+] Connecting to the Leak Database...[*] version: PostgreSQL 12.15emploleaks(linkedin)> run_pyscript workflows/check_leaked_passwords.py EvilCorp[-] Failing login... trying again![-] Failing login... trying again![+] Connected to the LinkedIn api successfullThe following command could take a couple of minutes, be patient Listing profiles: Getting and processing contact info of "señor girafales" Getting and processing contact info of "kiko" Getting and processing contact info of "el chavo del 8"[...][+] Password for "señor girafales" exists[*] Email: [email protected]+------------------+| passwords leaked |+------------------+| laFQqAOSL69 |+------------------+构建索引COMB数据库
├── count_total.sh├── data│ ├── 0│ ├── 1│ │ ├── 0│ │ ├── 1│ │ ├── 2│ │ ├── 3│ │ ├── 4│ │ ├── 5│ │ ├── 6│ │ ├── 7│ │ ├── 8│ │ ├── 9│ │ ├── a│ │ ├── b│ │ ├── c│ │ ├── d│ │ ├── e│ │ ├── f│ │ ├── g│ │ ├── h│ │ ├── i│ │ ├── j│ │ ├── k│ │ ├── l│ │ ├── m│ │ ├── n│ │ ├── o│ │ ├── p│ │ ├── q│ │ ├── r│ │ ├── s│ │ ├── symbols│ │ ├── temploleaks> create_db --dbname leakdb --user leakdb_user --passwd leakdb_pass --comb /home/pasta/Downloads/comb[*] The full database occups more than 200 GB, take this in account[*] Creating the databaseERROR: database "leakdb" already existsERROR: role "leakdb_user" already exists ALTER ROLEALTER DATABASEGRANTALTER SYSTEMALTER SYSTEMALTER SYSTEMALTER SYSTEMALTER SYSTEMALTER SYSTEMALTER SYSTEMALTER SYSTEMALTER SYSTEMALTER SYSTEM[+] Connecting to the Leak Database...[+] Importing from /home/pasta/Downloads/comb/data/1/m[+] Importing from /home/pasta/Downloads/comb/data/1/d[+] Importing from /home/pasta/Downloads/comb/data/1/v[+] Importing from /home/pasta/Downloads/comb/data/1/0[+] Importing from /home/pasta/Downloads/comb/data/1/8[+] Importing from /home/pasta/Downloads/comb/data/1/u[+] Importing from /home/pasta/Downloads/comb/data/1/k[+] Importing from /home/pasta/Downloads/comb/data/1/r[+] Importing from /home/pasta/Downloads/comb/data/1/7[+] Importing from /home/pasta/Downloads/comb/data/1/h[+] Importing from /home/pasta/Downloads/comb/data/1/o[+] Importing from /home/pasta/Downloads/comb/data/1/t[+] Importing from /home/pasta/Downloads/comb/data/1/f[+] Importing from /home/pasta/Downloads/comb/data/1/n[+] Importing from /home/pasta/Downloads/comb/data/1/symbols[+] Importing from /home/pasta/Downloads/comb/data/1/g[+] Importing from /home/pasta/Downloads/comb/data/1/q[+] Importing from /home/pasta/Downloads/comb/data/1/a[+] Importing from /home/pasta/Downloads/comb/data/1/e[+] Importing from /home/pasta/Downloads/comb/data/1/l [+] Importing from /home/pasta/Downloads/comb/data/1/y [+] Importing from /home/pasta/Downloads/comb/data/1/s [+] Importing from /home/pasta/Downloads/comb/data/1/3[+] Importing from /home/pasta/Downloads/comb/data/1/6[*] Creating index...原文始发于微信公众号（FreeBuf）：EmploLeaks：一款针对企业安全的组织员工信息收集OSINT工具
免责声明:文章中涉及的程序(方法)可能带有攻击性，仅供安全研究与教学之用，读者将其信息做其他用途，由读者承担全部法律及连带责任，本站不承担任何法律及连带责任；如有问题可邮件联系(建议使用企业邮箱或有效邮箱,避免邮件被拦截，联系方式见首页)，望知悉。
- 左青龙
- 微信扫一扫
-
- 右白虎
- 微信扫一扫
-
评论