Pivot map
Pivot from here
Outputs from LinkedInt can become inputs for the next tool. These are the most relevant follow-on pivots in the library.
Lookup email addresses and mailing addresses with reverse email search to identify people and organizations in OSINT investigations.
Addresses.com provides US residential address lookups, reverse phone searches, and people finder tools for locating individuals.
Ancestry search provides access to billions of historical records including census data, vital records, immigration documents, and family trees.
Canada411 is Canada's people directory for finding individuals by name, providing addresses and phone numbers for OSINT investigations.
AccountKiller provides direct deletion links and step-by-step instructions for removing accounts on hundreds of websites and social platforms.
Lookup email addresses and mailing addresses with reverse email search to identify people and organizations in OSINT investigations.
Addresses.com provides US residential address lookups, reverse phone searches, and people finder tools for locating individuals.
Algo VPN automates deployment of a personal WireGuard or IKEv2 VPN server in the cloud for private, secure OPSEC browsing.
Investigator Use
LinkedInt is an open-source Python tool available on GitHub that automates LinkedIn intelligence gathering using Google dorking techniques. Rather than scraping LinkedIn directly (which is aggressively blocked), LinkedInt uses Google's index of LinkedIn content to find profiles, extract employee information, and map corporate connections.
For OSINT investigators conducting corporate reconnaissance, LinkedIn is the premier source of professional identity and organizational structure data. LinkedInt automates the process of extracting this intelligence at scale using Google dork queries that search the LinkedIn data indexed by Google without triggering LinkedIn's own anti-scraping measures.
Employee enumeration for target organizations is the primary investigative application. LinkedInt can identify employees of a specific company by querying Google for LinkedIn profiles that list that company as their employer, returning names, job titles, and profile URLs for hundreds of employees. This employee list reveals organizational structure, department composition, and key personnel.
For spear-phishing simulations in authorized penetration testing, the employee list from LinkedInt provides targeting data — knowing the format of corporate email addresses (from Email Format tools) and having a complete employee list allows realistic phishing campaign targeting.
For corporate intelligence investigations, the employee roster reveals hiring patterns, specific expertise areas (visible from job titles and skills), executive leadership composition, and turnover patterns if compared with previous listings.
Job title analysis from LinkedIn data reveals the organizational hierarchy and functional divisions of a target company, providing intelligence about their operational structure that may not be otherwise disclosed.
LinkedInt's Google-based approach avoids LinkedIn's direct API restrictions but is subject to Google's rate limiting and LinkedIn's ongoing efforts to de-index certain content.
Document the target company, query date, number of profiles found, and relevant individual profiles identified for investigation records.
Before You Pivot
Capture the target, search terms, and why this source is relevant before you leave the page.
Archive volatile pages, save screenshots, and keep timestamps for anything that may change.
Treat one tool as a lead source. Confirm important findings with independent sources.
Related tools
Another API-less Instagram pictures and videos downloader. (defunct)
Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname
Trusted Instagram account viewer. ✔ Anonymous Insta browsing. ✔ Watch and download IG content without logging in or signing up.
InstaHunt is a free OSINT tool for finding Instagram posts and locations based on geographic coordinates without an account.
One Million Tweet Map visualizes geotagged tweets in real time on an interactive world map for geospatial social media intelligence.
Reaper is an open-source social media scraping tool for collecting public posts and profile data across multiple platforms for OSINT.