Collecting and Crafting User Information from LinkedIn

This report details Peasant, a tool and operational workflow for harvesting LinkedIn profile data, automating connection requests, and spoofing profiles to increase access to target users; it shows examples of scaling reconnaissance (thousands of profiles), using Parsuite to generate targeted email lists for phishing/password-spray campaigns, provides defensive recommendations, and discloses a remediated LinkedIn access-control vulnerability related to image URNs.