Pivot map
Pivot from here
Outputs from Recruitin can become inputs for the next tool. These are the most relevant follow-on pivots in the library.
Lookup email addresses and mailing addresses with reverse email search to identify people and organizations in OSINT investigations.
Addresses.com provides US residential address lookups, reverse phone searches, and people finder tools for locating individuals.
Ancestry search provides access to billions of historical records including census data, vital records, immigration documents, and family trees.
Canada411 is Canada's people directory for finding individuals by name, providing addresses and phone numbers for OSINT investigations.
AccountKiller provides direct deletion links and step-by-step instructions for removing accounts on hundreds of websites and social platforms.
Lookup email addresses and mailing addresses with reverse email search to identify people and organizations in OSINT investigations.
Addresses.com provides US residential address lookups, reverse phone searches, and people finder tools for locating individuals.
Algo VPN automates deployment of a personal WireGuard or IKEv2 VPN server in the cloud for private, secure OPSEC browsing.
Investigator Use
Recruitin (recruitin.net) is a LinkedIn search tool that generates and executes Google dorking queries specifically designed to find LinkedIn profiles matching specific criteria — job titles, companies, skills, locations, and other attributes — without requiring a LinkedIn account or accessing LinkedIn directly.
For OSINT investigators, Recruitin provides a structured interface for LinkedIn intelligence gathering that circumvents LinkedIn's authentication requirements and search restrictions. By using Google's index of publicly visible LinkedIn data, Recruitin finds profiles that match detailed professional criteria without logging into LinkedIn.
Corporate reconnaissance using Recruitin identifies employees at specific companies by role, department, or seniority level. Searching for security employees, executives, IT administrators, or other specific roles at a target organization reveals the people responsible for functions relevant to the investigation.
For authorized social engineering assessments, identifying specific employees by their self-disclosed roles and skills enables targeted and realistic engagement scenarios. Knowing who the CFO, IT security manager, or specific department heads are at a target organization is foundational to realistic spear-phishing simulation.
Intelligence analyst identification: Recruitin can find employees with intelligence, security, or investigation roles at target organizations — revealing who has relevant expertise and responsibilities.
The Google dork generation approach means Recruitin depends on Google's LinkedIn indexing depth. Recently created profiles or profiles with privacy settings that limit search engine indexing may not appear.
For corporate investigations, cross-referencing Recruitin results with other professional databases (Crunchbase for startup employment, corporate filings for officer information) provides a multi-source view of the target organization's personnel.
Document the target organization, search criteria used, profiles identified, and query timestamps for investigation records.
Before You Pivot
Capture the target, search terms, and why this source is relevant before you leave the page.
Archive volatile pages, save screenshots, and keep timestamps for anything that may change.
Treat one tool as a lead source. Confirm important findings with independent sources.
Related tools
Another API-less Instagram pictures and videos downloader. (defunct)
Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname
Trusted Instagram account viewer. ✔ Anonymous Insta browsing. ✔ Watch and download IG content without logging in or signing up.
InstaHunt is a free OSINT tool for finding Instagram posts and locations based on geographic coordinates without an account.
LinkedInt is a LinkedIn recon tool extracting employee names, emails, and org data via Google dorks without a LinkedIn login.
One Million Tweet Map visualizes geotagged tweets in real time on an interactive world map for geospatial social media intelligence.