Metasploit mailing list archives

Auxiliary Module - Generation of usernames for target company


From: Jason Wood <tadaka () gmail com>
Date: Wed, 16 Jun 2010 17:31:14 -0600

I think that my first email got stuck in the moderation queue, so I thought
I'd resend it now that I'm a list member.  Hope this is of interest to
folks.

Jason

---------- Forwarded message ----------
From: Jason Wood <tadaka () gmail com>
Date: Tue, Jun 15, 2010 at 10:36 AM
Subject: Auxiliary Module - Generation of usernames for target company
To: framework () spool metasploit com


Hi all,
I've finished an auxiliary/gather module which creates possible username
combinations for a target company.  It does this by searching Google or
Yahoo's XML API for "site:linkedin.com targetcompanyname", gathers up the
names of all the people with the target company as part of their profile and
then munges them into possible usernames.  The results can be thrown to the
console window or dumped to a directory of the pen tester's choice.

Current username combinations are:

first name + last initial
first name + last name
first initial + last name
first initial + middle initial + last name
last name + first initial

I've included the module on this email or it can be downloaded from
SourceForge at https://sourceforge.net/projects/reconnoiter/files/.  I'm
still doing some testing and am asking for more eyes on it, so any feed back
is extremely welcome.  Also, if it appears worthy I'd like to submit it for
possible inclusion to the framework.

Thanks,
Jason

-- 

irc: Tadaka
Twitter:  Jason_Wood
jwnetworkconsulting.com

Attachment: username_gen.rb.txt
Description:

_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework

Current thread: