Profile Discovery by Username
inputs: username | outputs: list of profiles associated with that username
- 1.check the same username (i.e. cham423) using each tool
- count the number of profiles discovered
- count number of false positives (nonexistent profiles, not mismatches)
- 2.rate difficulty of deployment
- 3.rate quality of output
- 4.rate development health
- 5.rate automation potential
see the template at the bottom of the page if you are adding a new tool.
python3 sherlock.py cham423 -o cham423.out
- 38 total results
- 0 false positives!
- 7 results were not the target, but were valid accounts
- python (medium difficulty)
- has a docker container as a fallback
- basically stdout, no JSON output option -- a list of discovered profile urls
- very healthy, recent commits, large number of contributors, long history
- very high, command line tool that supports input lists
- <todo> not tested at scale. from a single host, would likely encounter rate limiting when enumerating large numbers of profiles
- 34 total results
- 0 false positives!
- easy, web hosted
- Clickable links, clipboard copy, excel, CSV, PDF
- Well supported/maintained.
- No captcha. there is an accompanying CLI tool, but it doesn't seem to function as well, with more false positive
python3 whats_my_name.py -u cham423 -o cham423.out
- 114 total results
- 75 false positives! (65% false positive rate)
Note: I am not sure why the CLI version of this tool has so many false positives. The web-hosted version (whatsmyname.app) is excellent.
- python (medium difficulty)
- file output was broken at time of testing (2022-09-18)
- stdout is printed in table form with lots of extra spaces/characters, and some profile links are cut off
- good
- medium -- this project is used by many projects for its JSON list of profile urls, which can be imported to check usernames automatically. the false positive rate is alarming
- 25 total results
- 1 false positive
- web hosted (easy difficulty)
- 1-5 clicks to full results
- No file output
- Profile links to signup/about pages, not valid profiles
- unknown (third party)
- very limited: captcha + cloudflare would prevent easy scraping
- 12 total results
- 1 false positives
- no file output
- site links point to root page, not profile link
- unknown (third party)
- no CAPTCHA, so could be scraped
- 15 total results
- 1 false positive
- web hosted (easy difficulty)
- requires 10+ clicks to see all sites, no single page with all results
- no file output
- profile links available in search results, but not on single page
- unknown (third party)
- no CAPTCHA, could potentially be scraped
- 14 total results
- 1 false positive
- web hosted (easy difficulty)
- 1-5 clicks to results
- no file output
- results link to specific profiles
- unknown (third party)
- no CAPTCHA, could potentially be scraped
- 42 total results
- 27 false positives
- 79 errors checking target site
- web hosted (easy difficulty)
- 1-5 clicks to results
- no file output
- profile links are to individual profile, not to root page which is nice
- unknown (third party)
- no CAPTCHA, could potentially be scraped
This tool is not currently functional as of 2022-09-18, and returns all false positives due to Cloudflare bot protection
- namevine
- socialsearcher
<link to tool>
- n total results
- n false positives
- <describe output options>
- <describe project health>
- <describe automation potential>
Last modified 5mo ago