MENU

使用Burp Suite收集LinkedIn用户名

March 21, 2018 • Security

BApp Store中安装Python Scripter插件

image5.png

将下方代码粘贴到Script选项中

if not messageIsRequest:
  response = messageInfo.getResponse()
  analyzedResponse = helpers.analyzeResponse(response)
  headerList = analyzedResponse.getHeaders()
  bodyStr = helpers.bytesToString(response[analyzedResponse.getBodyOffset():]).encode('ascii','ignore')
  if "| Professional Profile - LinkedIn" in bodyStr:
    strs = bodyStr.split("| Professional Profile - LinkedIn")
    strs.pop(-1) #remove the last item
    for str in strs:
      try:
        name = (str.rsplit("x3e",1)[1]).strip()
      except:
        x="test"
      try:
        name = (str.rsplit("\">",1)[1]).strip()
        if "=\"" in name:
          name = str.rsplit("=\"",1)[1]
        if "<title>" in name:
          name = (str.rsplit("<title>",1)[1]).strip()
      except:
        x="test"
      print name
  if "| LinkedIn" in bodyStr:
    strs = bodyStr.split("| LinkedIn")
    strs.pop(-1) #remove the last item
    for str in strs:
      try:
        name = (str.rsplit("x3e",1)[1]).strip()
      except:
        x="test"
      try:
        name = (str.rsplit("\">",1)[1]).strip()
        if "=\"" in name:
          name = str.rsplit("=\"",1)[1]
        if "<title>" in name:
          name = (str.rsplit("<title>",1)[1]).strip()
      except:
        x="test"
      print name

image2.png

配置输出结果

image4.png

开启代理使用Google Dork进行搜索

site:linkedin.com/in “Company Name”

google.png

正常浏览网页即可

Archives QR Code
QR Code for this page
Tipping QR Code