Investigator Use
Recruitin (recruitin.net) is a LinkedIn search tool that generates and executes Google dorking queries specifically designed to find LinkedIn profiles matching specific criteria — job titles, companies, skills, locations, and other attributes — without requiring a LinkedIn account or accessing LinkedIn directly.
For OSINT investigators, Recruitin provides a structured interface for LinkedIn intelligence gathering that circumvents LinkedIn's authentication requirements and search restrictions. By using Google's index of publicly visible LinkedIn data, Recruitin finds profiles that match detailed professional criteria without logging into LinkedIn.
Corporate reconnaissance using Recruitin identifies employees at specific companies by role, department, or seniority level. Searching for security employees, executives, IT administrators, or other specific roles at a target organization reveals the people responsible for functions relevant to the investigation.
For authorized social engineering assessments, identifying specific employees by their self-disclosed roles and skills enables targeted and realistic engagement scenarios. Knowing who the CFO, IT security manager, or specific department heads are at a target organization is foundational to realistic spear-phishing simulation.
Intelligence analyst identification: Recruitin can find employees with intelligence, security, or investigation roles at target organizations — revealing who has relevant expertise and responsibilities.
The Google dork generation approach means Recruitin depends on Google's LinkedIn indexing depth. Recently created profiles or profiles with privacy settings that limit search engine indexing may not appear.
For corporate investigations, cross-referencing Recruitin results with other professional databases (Crunchbase for startup employment, corporate filings for officer information) provides a multi-source view of the target organization's personnel.
Document the target organization, search criteria used, profiles identified, and query timestamps for investigation records.
Before You Pivot
Record Context
Capture the target, search terms, and why this source is relevant before you leave the page.
Preserve Evidence
Archive volatile pages, save screenshots, and keep timestamps for anything that may change.
Corroborate
Treat one tool as a lead source. Confirm important findings with independent sources.
Related Tools
InstaLooter
Social Media OSINT
Another API-less Instagram pictures and videos downloader. (defunct)
Instagram Osint Tool
Social Media OSINT
Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname
Instagram viewer
Social Media OSINT
Trusted Instagram account viewer. ✔ Anonymous Insta browsing. ✔ Watch and download IG content without logging in or signing up.
Instahunt
Social Media OSINT
InstaHunt is a free OSINT tool for finding Instagram posts and locations based on geographic coordinates without an account.
LinkedInt
Social Media OSINT
LinkedInt is a LinkedIn recon tool extracting employee names, emails, and org data via Google dorks without a LinkedIn login.
Onemilliontweetmap
Social Media OSINT
One Million Tweet Map visualizes geotagged tweets in real time on an interactive world map for geospatial social media intelligence.