infobyte / emploleaks Goto Github PK
View Code? Open in Web Editor NEWAn OSINT tool that helps detect members of a company with leaked credentials
Home Page: https://fardadaysec.com
An OSINT tool that helps detect members of a company with leaked credentials
Home Page: https://fardadaysec.com
Hello,
First of all, thank you for sharing this tool, looks like interesting.
I was trying to test this tool, but seems when I try to run, I receive an output regarding a missing modulde:
python3 cli/emploleaks.py
However, as you can see, module it´s already installed, along with the other requirements:
C:\Users\usuario.regular\Desktop\emploleaks>pip3 list installed
Package Version
altgraph 0.17.3
attrs 23.1.0
beautifulsoup4 4.12.2
certifi 2023.5.7
cffi 1.15.1
charset-normalizer 3.1.0
cmd2 2.4.3
colorama 0.4.6
coloramma 4.5
cryptography 39.0.1
fernet 1.0.1
halo 0.0.31
idna 3.4
linkedin-api 2.0.1
log-symbols 0.0.14
lxml 4.9.2
Naked 0.1.32
oauthlib 3.2.2
pefile 2023.2.7
pip 23.2.1
prettytable 3.7.0
psycopg2 2.9.6
pyaes 1.6.1
pycparser 2.21
pycryptodome 3.17
pygrabshot 1.0.2
pyinstaller 5.13.0
pyinstaller-hooks-contrib 2023.6
pynput 1.7.6
pyperclip 1.8.2
pypiwin32 223
pyreadline3 3.4.1
python-cryptography-fernet-wrapper 1.0.4
pywin32 305
pywin32-ctypes 0.2.2
PyYAML 6.0
requests 2.31.0
requests-oauthlib 1.3.1
setuptools 65.5.0
shellescape 3.8.1
six 1.16.0
soupsieve 2.4.1
spinners 0.0.24
tabulate 0.9.0
termcolor 2.3.0
tweepy 4.14.0
urllib3 2.0.2
wcwidth 0.2.6
Environment:
Windows 11 x64 21H2
Python 3.11.4
I also tried pip3 install -r requirements.txt, and we I don´t see any error.
Anyway, I was able to reproduce this same issue on Linux Mint 21.1 (Vera) with python 3.10.12:
Regards.
emploleaks(linkedin)> run find
[-] Yikes, got an HTTP 400. This is not normal
Bailing from loops, but you should troubleshoot.
💻 Listing profiles:
emploleaks(linkedin)>
When attempting to follow the steps in the readme, I enter my credentials as instructed and perform "run login" to see the following result:
emploleaks(linkedin)> run login
[-] LinkedIn has a message for you that you need to address.
[*] Please log in using a web browser first, and then come back and try again.
[-] Session could not be established.
I then open LinkedIn in my browser and see no message. I log out and back in and get the same result. I log in on other browsers on my machine, and get the same result.
I have "set debug true" but do not see any additional debug information regarding the problem establishing a session. I do have 2FA enabled, but I have it set to an authenticator app which generates a code.
I am running on an Intel MacBook Pro, Mac OS 13.4.1 (c) (22F770820d), Python 3.10.12 from homebrew, and I had to modify the requirements.txt to "psycopg2-binary==2.9.6" in order to be able to install. I plan on testing this on my M2 machine tomorrow to see if there is any difference.
Please let me know if there are any additional details needed.
Report as an issue when a company doesn't have any job description about security head security, ciso, security,etc
I'm getting an error after running a scan. It finds the employees just fine now but if I run another scan I am getting this http 500 error. Could just be that i am making to many requests?
Do I have to run this find command first to get the list and then run the workflow next? or can I just run the workflow on its own?
Thanks!
Traceback (most recent call last):
File "/usr/lib/python3/dist-packages/cmd2/cmd2.py", line 2399, in onecmd_plus_hooks
stop = self.onecmd(statement, add_to_history=add_to_history)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3/dist-packages/cmd2/cmd2.py", line 2852, in onecmd
stop = func(statement)
^^^^^^^^^^^^^^^
File "/root/Documents/emploleaks/cli/emploleaks.py", line 109, in wrapper
func(*args)
File "/root/Documents/emploleaks/cli/emploleaks.py", line 305, in do_run
style(f"\n{self.emojis['check']} Done", fg='green')
File "/usr/lib/python3/dist-packages/cmd2/ansi.py", line 1004, in style
raise TypeError("fg must be a subclass of FgColor")
TypeError: fg must be a subclass of FgColor
I get this error running as a regular user as well. I tried to set debug true but didn't help.
Where do we find the databases that are made using the create_db? So that I can delete the databases off of the hard drive and start over? I believe I used up a lot of space trying to get the comb going. I had it going but I would still get this error.
When I try to make a 'run find [company]', I get this error:
emploleaks(linkedin)> run find faraday
⠸ Gathering Information[+] Added 25 new names.
⠹ Gathering Information[+] Added 25 new names.
⠸ Gathering Information[+] Added 25 new names.
⠧ Gathering Information[+] Added 25 new names.
⠏ Gathering Information[+] Added 25 new names.
⠏ Gathering Information[+] Added 25 new names.
⠇ Gathering Information[+] Added 25 new names.
⠧ Gathering Information[+] Added 25 new names.
⠏ Gathering Information[+] Added 25 new names.
⠏ Gathering Information[+] Added 25 new names.
⠏ Gathering Information[+] Added 25 new names.
⠇ Gathering Information[+] Added 25 new names.
⠧ Gathering Information[+] Added 25 new names.
⠴ Gathering Information[+] Added 25 new names.
⠸ Gathering Information[+] Added 25 new names.
⠙ Gathering Information[+] Added 25 new names.
⠋ Gathering Information[+] Added 25 new names.
⠇ Gathering Information[+] Added 25 new names.
⠦ Gathering Information[+] Added 25 new names.
⠦ Gathering Information[+] Added 25 new names.
⠴ Gathering Information[+] Added 25 new names.
⠸ Gathering Information[+] Added 25 new names.
⠦ Gathering Information[+] Added 25 new names.
⠴ Gathering Information[+] Added 25 new names.
⠸ Gathering Information[+] Added 25 new names.
⠇ Gathering InformationTraceback (most recent call last):
File "/opt/homebrew/lib/python3.10/site-packages/cmd2/cmd2.py", line 2399, in onecmd_plus_hooks
stop = self.onecmd(statement, add_to_history=add_to_history)
File "/opt/homebrew/lib/python3.10/site-packages/cmd2/cmd2.py", line 2850, in onecmd
stop = func(statement)
File "/Users/0x1gab/Desktop/tools/emploleaks/cli/emploleaks.py", line 98, in wrapper
func(*args)
File "/Users/0x1gab/Desktop/tools/emploleaks/cli/emploleaks.py", line 265, in do_run
profiles = self.plugin_instance.do_loops(found_id, outer_loops, depth)
File "/Users/0x1gab/Desktop/tools/emploleaks/cli/plugins/linkedin.py", line 139, in do_loops
found_profiles = self.find_employees(result.text)
File "/Users/0x1gab/Desktop/tools/emploleaks/cli/plugins/linkedin.py", line 197, in find_employees
'occupation': profile['occupation'],
KeyError: 'occupation'
EXCEPTION of type 'KeyError' occurred with message: 'occupation
Hi, I thought that the twitter version could be useful
Could you add this plugin?
Error message when using 'run find companyname'
[-] Yikes, got an HTTP 400. This is not normal
Bailing from loops, but you should troubleshoot.
💻 Listing profiles:
Not sure what to troubleshoot. impersonation seems to be working and this error comes when it starts hitting the LI API.
If it doesn't find a company name the tool gets stuck on
Gathering information and will let you use other commands still.
Only way to get out of that bug is type "quit" but then you have to start the tool up again.
Hello,
I've configured the module as described with JSESSIONID and li-at. However, whenever i'm trying to run command "run find CompanyName", it shows company name does not exist on LinkedIn.
Could you please help?
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.