0Pricing
Cyber Security Academy · Lesson

Social Media and People-Search OSINT

Gather intelligence from LinkedIn, Twitter, GitHub, and people-search sites responsibly.

Social Media and People-Search OSINT is a free Cyber Security Academy lesson on CoddyKit — lesson 4 of 4. You can read the complete lesson below for free — then practise it hands-on in the browser with a built-in code editor and a 24/7 AI tutor. It is part of the Cyber Security Academy learning path, one of 4 lessons in the course, and your progress syncs across the web and the CoddyKit app.

Social Media as an OSINT Source

Social media platforms are rich sources of intelligence: employees reveal job titles, projects, colleagues, office locations, technology stacks, and organizational structure — often unintentionally. LinkedIn alone can map an entire organization's hierarchy.

LinkedIn Intelligence

LinkedIn reveals:

  • Employee names, titles, and departments
  • Technology stack (from job postings and skills)
  • Organizational structure and reporting chains
  • Recent hires (new attack surface)
  • Employees who left (potential disgruntled insiders)
site:linkedin.com "example.com" "engineer"
site:linkedin.com "example.com" "security"

Twitter/X and GitHub Intel

Technical employees often share:

  • Internal tooling names and architecture hints on Twitter
  • Code with hardcoded credentials or internal hostnames on GitHub
  • Conference talk slides with internal system diagrams
  • Stack traces with infrastructure details in public bug reports

GitHub OSINT

Search GitHub for organization-related secrets:

site:github.com "example.com" password
site:github.com "api.example.com"
site:github.com "PRIVATE_KEY" "example"
# Tools: truffleHog, gitrob, gitleaks for scanning repos

People-Search Sites

Data brokers aggregate public records into people profiles: name, address, phone, relatives, employer history. Sites like Spokeo, BeenVerified, and Intelius compile this for anyone to search. Social engineers use this to craft convincing pretexts.

Building a Target Profile

Combining social media sources creates detailed profiles:

  1. LinkedIn: current role, employer, colleagues
  2. Twitter: interests, opinions, recent activities
  3. Facebook: personal life, location check-ins
  4. GitHub: technical skills, projects, email
  5. People-search: home address, phone, relatives

Maltego: Graph-Based OSINT

Maltego is an OSINT platform that visualizes relationships between entities: domains, IPs, persons, social accounts, organizations. It automates data collection from multiple sources and displays the relationship graph, revealing connections not obvious from individual lookups.

Email Address Discovery

Finding email addresses:

  • Hunter.io — email patterns for domains
  • theHarvester — email collection tool
  • LinkedIn profiles with contact info visible
  • Conference proceedings — author emails
theHarvester -d example.com -l 500 -b linkedin

Protecting Against Social Media OSINT

Organizational defenses:

  • Train employees on information disclosure risks
  • Review job postings for excessive technical detail
  • Use generic role titles publicly when possible
  • Monitor for sensitive mentions on Pastebin, dark web, GitHub

OSINT for Background Checks

Legitimate uses of people-search OSINT:

  • HR background verification
  • Due diligence on business partners
  • Fraud investigations
  • Journalism and accountability reporting

Privacy laws vary by jurisdiction — know applicable regulations (GDPR, CCPA) before collecting personal data.

Sock Puppet Accounts

Security researchers create sock puppet accounts (fake personas) to conduct OSINT without revealing their identity or alerting the target. These must be carefully maintained — any link to real identity defeats the purpose.

Quick Check: OSINT

A red teamer discovers the target company's tech stack by searching job postings. What type of intelligence collection is this?

Lesson Recap

Social media and people-search sites expose organization structure, employee details, technology stacks, and personal information. LinkedIn, GitHub, Twitter, and data broker sites collectively build comprehensive target profiles. Tools: Maltego (relationship graphs), theHarvester, Hunter.io. Defense: employee training, job posting hygiene, monitoring for sensitive mentions.

Frequently asked questions

Is the “Social Media and People-Search OSINT” lesson free?

Yes — the full text of “Social Media and People-Search OSINT” is free to read here on the web, and the Cyber Security Academy course includes 4 lessons in total. To practise it interactively (a built-in code editor and a 24/7 AI tutor) and unlock the rest of the Cyber Security Academy course, upgrade to CoddyKit PRO.

What will I learn in “Social Media and People-Search OSINT”?

Gather intelligence from LinkedIn, Twitter, GitHub, and people-search sites responsibly. You practise Cyber Security Academy with hands-on code you run directly in the browser, and a 24/7 AI tutor answers your questions as you work through the lesson.

Do I need any experience to start Cyber Security Academy?

No prior experience is required. Cyber Security Academy on CoddyKit is structured for beginners through advanced learners; this is — lesson 4 of 4, so you can start here or from the beginning and move at your own pace.

How long does the “Social Media and People-Search OSINT” lesson take?

Most CoddyKit lessons take about 5–10 minutes. Each one is bite-sized and interactive, so you make steady progress and pick up exactly where you left off across the web and the app.

Can I write and run code in this Cyber Security Academy lesson?

Yes. Every Cyber Security Academy lesson includes a built-in code editor, so you write and run real code right in your browser and get instant AI feedback — no local setup required.

All lessons in this course

  1. Google Dorking for Information Gathering
  2. WHOIS, DNS Enumeration, and Certificates
  3. Shodan: The Search Engine for Internet Devices
  4. Social Media and People-Search OSINT
← Back to Cyber Security Academy