Apr 04, 2025, 11:01 AM
An OSINT tool that helps identify company employees with leaked credentials.
The tool starts by searching through LinkedIn to obtain a list of employees of the company. Then, it looks for their social network profiles to find their personal email addresses. Finally, it uses those email addresses to search through a custom COMB database to retrieve leaked passwords. You an easily add yours and connect to through the tool.
https://github.com/infobyte/emploleaks
The tool starts by searching through LinkedIn to obtain a list of employees of the company. Then, it looks for their social network profiles to find their personal email addresses. Finally, it uses those email addresses to search through a custom COMB database to retrieve leaked passwords. You an easily add yours and connect to through the tool.
emploleaks(linkedin)> run_pyscript workflows/check_leaked_passwords.py EvilCorp
[-] Failing login... trying again!
[-] Failing login... trying again!
[+] Connected to the LinkedIn api successfull
The following command could take a couple of minutes, be patient
Listing profiles:
✔ Getting and processing contact info of "señor girafales"
✔ Getting and processing contact info of "kiko"
✔ Getting and processing contact info of "el chavo del 8"
[...]
[+] Password for "señor girafales" exists
[*]Email: girafales@gmail.com
+------------------+
| passwords leaked |
+------------------+
| laFQqAOSL69 |
+------------------+https://github.com/infobyte/emploleaks