CrossLinked simplifies the processes of searching LinkedIn to collect valid employee names when performing password spraying or another security testing against an organization. Using similar search engine scraping capabilities found in tools like subscraper and pymeta , CrossLinked will find valid employee names and help format the data according to the organization’s account naming convention. Results will be written to a ‘names.txt’ file in the current directory for further testing. Setup git clone cd crosslinked pip3 install -r requirements.txt Examples python3 -f ‘{first}.{last}’ company_name python3 -f ‘domain{f}{last}’ -t 45 -j 0.5 company_name Usage -h, –help show this help message and exit -t TIMEOUT Timeout [seconds] for search threads (Default: 25) -j JITTER Jitter for scraping evasion (Default: 0) -o OUTFILE Change name of output file (default: names.txt -f NFORMAT Format names, ex: ‘domain{f}{last}’, ‘{first}.{last}’ -s, –safe Only parse names with company in title (Reduces false positives) -v Show names and titles recovered after enumeration Additions Two additional scripts are included in this repo to aid in generating potential username and password files: – Generates custom password lists using words and variables defined at the top of the script. Perform number/letter substitutions, append special characters, and more. Once configured, run the script with no arguments to generate a ‘passwords.txt’ output file. – Generates custom usernames using inputs from firstname.txt and lastname.txt files, provided at the command line. Format is defined similiar to and will be written to ‘users.txt’. python3 -first top100_firstnames.txt -last top100_lastnames.txt -f “domain{f}{last}” Download Crosslinked