Creating usernames using Google and Linkedin

[larry at pauldotcom.com (Larry Pesce)]

Jason, thanks!  I was trying to figure that out, but of course, I'm
doing about 12 things at once.  Now to compare the code to see what you
changed.  :-)

Works like a champ.  Ran it using a few organization names that I know,
and I'm definitely in agreement that the usernames match...

- L



Jason Wood wrote:
> Robin, feel free to use it in CeWL or wherever else.
>
> Larry, I changed the script to take the number of results pages you want
> as an argument and put it on the site.
>
> Glad you guys liked it.  :)
>
> Jason
>
> On Fri, Jun 12, 2009 at 8:06 AM, Larry Pesce <larry at pauldotcom.com
> <mailto:larry at pauldotcom.com>> wrote:
>
>     Wow, this works like a freaking champ.  Now to NOT throttle it to the
>     first page of google results. :-)
>
>     Jason, you can be sure I'll be adding this to my recon methodologies,
>     whether this script, or though CEWL.
>
>     Thanks!
>
>     - L
>
>     Jason Wood wrote:
>     > Hey all,
>     > I was messing with something today and remembered episode 129 had a
>     > segment on using a target company's website to generate passwords.  I
>     > tried it out and with a bit tweaking it worked great.  But I also
>     wanted
>     > a username list that was targeted for the company.  I took a twist on
>     > creating passwords and did some queries on Google such as
>     > "site:linkedin.com <http://linkedin.com> <http://linkedin.com>
>     CompanyName".  In my case, I
>     > found 26 pages of search results containing almost nothing but
>     people's
>     > full names.
>     >
>     > I found a python script that pdp at gnucitizen had written to pull
>     > google search results.  I did some hacking on it and came up with a
>     > script to create a list of usernames using the targeted search
>     results.
>     > It creates the basic variations of first initial, last name and
>     > firstname, last initial.  I'm not a python scripter, so if you
>     have any
>     > suggestions on improvements please let me know.  I've got it
>     dialed down
>     > to only take the first page's results.  You can download it at
>     > http://www.jwnetworkconsulting.com/downloads/usernameGen.txt
>     >
>     > The only real defense I can think of against this is to make sure
>     > usernames at your organization are not based on their names.  I know
>     > from experience that people will absolutely HATE it, but it would
>     work.
>     >
>     > Any how, hopefully this is useful to someone else.
>     >
>     > Jason
>     >
>     >
>     >
>     ------------------------------------------------------------------------
>     >
>     > _______________________________________________
>     > Pauldotcom mailing list
>     > Pauldotcom at mail.pauldotcom.com <mailto:Pauldotcom at mail.pauldotcom.com>
>     > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
>     > Main Web Site: http://pauldotcom.com
>     _______________________________________________
>     Pauldotcom mailing list
>     Pauldotcom at mail.pauldotcom.com <mailto:Pauldotcom at mail.pauldotcom.com>
>     http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
>     Main Web Site: http://pauldotcom.com
>
>
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom at mail.pauldotcom.com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com