Thread by @OsintStash

(1/10) #OSINT #thread
✉️🔎💥
E-Reveal: #Reveal email addresses on #LinkedIn Profiles! chrome.google.com/webstore/detai…

? HOW DOES IT WORK?

When you visit a LinkedIn profile, the #chrome extension will (explained in tweets below 👇🏻)

(2/10)
Pull the person's name and company from the page

(3/10)
Convert the company name into a domain via Clearbit's [free autocomplete api](clearbit.com/docs#autocompl…)

(4/10)
Create a list of possible emails via permutating combinations of first name + last name + domain

(5/10)
For each of the possible emails, check each one and see if any are valid (validity check outlined in next section)

(6/10)
When a valid email address is detected, insert it into the LinkedIn profile you are viewing along with its source

(7/10)

? HOW DOES IT CHECK THAT EMAIL IS VALID?

Gmail / google apps for businesses emails are validated with 100% accuracy via [this method](blog.0day.rocks/abusing-gmail-…

(8/10)
Сhecking #DNS records with a reverse DNS lookup to detect if any domains have been registered with an email

(9/10)
Checking #Github's unauthenticated #API for any commits made by an email

(10/10)
Checking #HaveIBeenPwned (!) to see if an email has been dumped in any hacks