Correlate people and breaches for credential access

Turn org OSINT into an authentication attack surface. Derive the email scheme, build a user list, and correlate with breach data for likely passwords.

# derive format and enumerate employees
python3 linkedin2username.py -c "Target Inc" -o users.txt
# format guessing: first.last@, flast@, first@

Check exposure for the derived accounts.

h8mail -t users.txt   # breach lookups; feed hits into a careful spray

Pro note: only use breach data you are authorized to use in the engagement, and spray within lockout limits. Old breach passwords plus a season-year mutation still work far too often, so a small, policy-aware spray beats a giant brute that locks accounts and alerts the SOC.