otlite · Web and records

Install CrossLinked on Linux or macOS in one command

CrossLinked scrapes search engines for LinkedIn results about a company and turns the names it finds into email addresses in the format you specify. It never touches LinkedIn directly.

CrossLinked in three lines

pipx install otlite
otlite install crosslinked
otlite run crosslinked -- --help

Runs m8sec/CrossLinked (GPL-3.0, ★ 1.6k, otlite 1.2.1, catalog updated Oct 23, 2026). otlite installs and runs it at a tested version; it does not change or verify the tool itself.

What CrossLinked is for

Building a staff list for an authorised assessment.
Guessing the email format of an organisation.

Typed inputs for CrossLinked

CrossLinked has no typed input. Pass its own arguments after --; otlite info crosslinked shows an example.

Where the results go

Every run lands under ./results/crosslinked/<target>/ as a timestamped output file, a .meta.json sidecar (the exact command, start and end time, exit code, and the SHA-256 of the output), and a .envelope.json with the entities found, in the same shape for every tool. List runs with otlite results, group them with --case, compare the last two with otlite diff crosslinked <target>, and pull indicators out with otlite extract crosslinked.

Before you run it

Takes a company name and a format string such as {first}.{last}@example.com with the original flags; the typed prefixes only cover the simple cases.
Search engines rate limit scraping. Keep runs small.

Update, remove, inspect

otlite info crosslinked      # inputs, keys, an example command
otlite example crosslinked   # sample output, where there is one
otlite update crosslinked    # move to the next tested version
otlite remove crosslinked    # delete its virtualenv

Full reference: the otlite docs, and the tool's own README on GitHub.

Pairs with

pywerview

pywerview is a Python port of PowerView for enumerating Active Directory from Linux: users, groups, computers, shares, and sessions, over LDAP and SMB with domain credentials you hold..

secator

secator wraps dozens of recon and scanning tools behind one command with a shared output format, and runs them as tasks, workflows, or full scans.

FinalRecon

FinalRecon runs a set of web recon checks against a URL in one go: headers, SSL certificate, WHOIS, crawler, DNS, subdomains, directory search, and a port scan.

When open-source isn't enough

CrossLinked guesses addresses. SearchIn's email-discovery provider returns verified addresses and the pattern a domain really uses.

Hunter.io

People & identity

See SearchIn

FAQ

CrossLinked with otlite, answered

How do I install CrossLinked on Kali, Ubuntu, or macOS?

Install otlite once with pipx install otlite (or the one-line installer on the otlite page), run otlite init, then otlite install crosslinked. The tool lands in its own virtualenv under ~/.otlite/, pinned to a version that was tested, so nothing touches your system Python. otlite doctor prints the command that fixes a missing git or venv module.

Which inputs does CrossLinked take through otlite?

CrossLinked does not take a typed input; pass its own arguments after --. otlite info crosslinked prints what it accepts and an example command.

Where does otlite save CrossLinked results?

Under ./results/crosslinked/<target>/ in the folder you run from, as a timestamped output file plus a .meta.json sidecar (the exact command, timing, exit code, and SHA-256) and a .envelope.json with the entities found. Add --case <name> to group runs, otlite results to list them, and otlite diff crosslinked <target> to compare the last two.

Does CrossLinked need an API key or a login?

No key is required for the basic run. Optional keys, where the project supports them, go in with otlite keys set NAME and are passed only to tools that declare them.

Can I run CrossLinked together with other tools?

Not through --all, because CrossLinked has no typed input. Run it on its own, or put it in a playbook with explicit arguments.