Scribd
Upload
1K views

Osint Playbook

This playbook discusses various open-source intelligence (OSINT) techniques that can help recruiters and sourcers obtain additional information about candidates from public sources like LinkedIn, Reddit, Instagram and others. It provides specific tips and tools to find a person's profile using their email, find their social media accounts from Skype, view a Reddit user's activity history, discover relevant online communities, and search for individuals using photos. The goal is to demonstrate effective and legal methods for using publicly available online information to supplement recruiting and sourcing processes.

Uploaded by

manikanth dra
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
1K views

Osint Playbook

This playbook discusses various open-source intelligence (OSINT) techniques that can help recruiters and sourcers obtain additional information about candidates from public sources like LinkedIn, Reddit, Instagram and others. It provides specific tips and tools to find a person's profile using their email, find their social media accounts from Skype, view a Reddit user's activity history, discover relevant online communities, and search for individuals using photos. The goal is to demonstrate effective and legal methods for using publicly available online information to supplement recruiting and sourcing processes.

Uploaded by

manikanth dra
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 11

OSINT Playbook

by Denis Dinkevich

In this playbook by Denis Dinkevish, a professional


sourcer, we will be discussing various OSINT techniques
that help recruiters and sourcers get essential or
additional information about the candidates. Let's see
how to receive this free information from messengers,
social media, search engines, etc. using various tools.
How to find a LinkedIn profile using
a person’s email address?

linkedin.com/sales/gmail/profile/viewByEmail/<EMAIL>/

Add the email to this link and discover corresponding Linkedin profile:

You can follow the same technique to find profiles


on pipl.com, intelx.io, dehashed.com, and other
websites:

pipl.com/search/?q=<EMAIL>/

intelx.io/?s=<EMAIL>/

dehashed.com/search?query=<EMAIL>/

api.trumail.io/v2/lookups/json?email=<EMAIL>/

thatsthem.com/email/<EMAIL>/

spytox.com/email-search/<EMAIL>/

data.occrp.org/search?q=<EMAIL>/

en.gravatar.com/site/check/<EMAIL>/

1
How to find an email using a Skype
nickname?

Use this tool to extract Skype user email


And vice versa find a Skype name by email

https://webresolver.nl/tools/skype_to_email
https://webresolver.nl/tools/email_to_skype

2
How to see all user activity on Reddit?

Click https://snoopsnoo.com/ and enter user’s You can find user activity timeline and decide
name on Reddit when is the best time for the communication

There are also a list of topics that are most


interesting for the user (based on the number of
submissions to the subreddits)

3
How to find relevant communities
on Reddit?

Need to find subreddits where your potential


candidates may contribute? Sometimes it is not
obvious, so the graph of related subreddits is the best
to help you find relevant communities on Reddit by
topic:

https://anvaka.github.io/sayit/?query=recruitment

4
How to use Instagram for recruiting?

Use Yooying web service to discover relevant hashtags and IG posts. For
example:

https://www.yooying.com/search?q=python&c=hashtags

Hence, you can find people who visit


professional conferences or create relevant
content. Discover their profiles and find their
social media accounts using

AmazingHiring Chrome extension.

5
How to use Instagram for recruiting?

In order to stay updated of any profile change from


the people you follow (location, profile bio, etc) use
the Spoonbil tool: https://spoonbill.io/

6
How to specify your Google search?

(Tip from Irina Shamaeva)

For example, you need to narrow the search results by a single website

or social network. Apply CSE built with Structured Data. Let’s see the
example with a Xing search:

Xing CSE =>


http://cse.google.com/cse?cx=012951739560700154499%3Aib-nggcqqn
k

Add the profile found to the investigation tool and receive


user’s structured data:

https://search.google.com/structured-data/testing-tool/u/
0/

7
How to specify your Google search?

(Tip from Irina Shamaeva)

In order to let Google search within the Structured


Data we need to use more:p: operator

And than adding the most relevant operator,


discovered from the screenshots above:

hcard + title, separated via - as follows: hcard-title:


=> more:p:hcard-title:

The same situation with person-location: operator


as below:

more:p:hcard-title:developer developer
more:p:person-location:berlin berlin php

8
How to find a person by photo?

You can make Google search for faces only by adding a small bit of code. When you go to Google Images Search,
enter your query, hit Enter, and then add “&imgtype=face” (without quotes)

9
by AI Technology, trusted by 6000+ recruiters

Try AmazingHiring sourcing platform to grow your recruiting superpowers:

It aggregates publicly available information from 50+ resources

Displays it in the consolidated profile: skills, achievements, experience, etc.

Refines your search with boolean operators and smart filters

Pre-assesses candidate’s achievements

Shows candidate’s publicly available contacts

Request a demo to see how it can boost your sourcing effectiveness!

Prepared with by AmazingHiring

You might also like