PaulDotCom mailing list archives

Creating usernames using Google and Linkedin


From: tadaka at gmail.com (Jason Wood)
Date: Fri, 12 Jun 2009 09:15:26 -0600

Robin, feel free to use it in CeWL or wherever else.

Larry, I changed the script to take the number of results pages you want as
an argument and put it on the site.

Glad you guys liked it.  :)

Jason

On Fri, Jun 12, 2009 at 8:06 AM, Larry Pesce <larry at pauldotcom.com> wrote:

Wow, this works like a freaking champ.  Now to NOT throttle it to the
first page of google results. :-)

Jason, you can be sure I'll be adding this to my recon methodologies,
whether this script, or though CEWL.

Thanks!

- L

Jason Wood wrote:
Hey all,
I was messing with something today and remembered episode 129 had a
segment on using a target company's website to generate passwords.  I
tried it out and with a bit tweaking it worked great.  But I also wanted
a username list that was targeted for the company.  I took a twist on
creating passwords and did some queries on Google such as
"site:linkedin.com <http://linkedin.com> CompanyName".  In my case, I
found 26 pages of search results containing almost nothing but people's
full names.

I found a python script that pdp at gnucitizen had written to pull
google search results.  I did some hacking on it and came up with a
script to create a list of usernames using the targeted search results.
It creates the basic variations of first initial, last name and
firstname, last initial.  I'm not a python scripter, so if you have any
suggestions on improvements please let me know.  I've got it dialed down
to only take the first page's results.  You can download it at
http://www.jwnetworkconsulting.com/downloads/usernameGen.txt

The only real defense I can think of against this is to make sure
usernames at your organization are not based on their names.  I know
from experience that people will absolutely HATE it, but it would work.

Any how, hopefully this is useful to someone else.

Jason


------------------------------------------------------------------------

_______________________________________________
Pauldotcom mailing list
Pauldotcom at mail.pauldotcom.com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com
_______________________________________________
Pauldotcom mailing list
Pauldotcom at mail.pauldotcom.com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.pauldotcom.com/pipermail/pauldotcom/attachments/20090612/1bbce2d8/attachment.htm 


Current thread: