Many users register themselves on websites using the same username. If you are performing an investigation on a person, and especially if you know a username or handle they are usually using online, you may hunt a username on social media with Sherlock.
This method is also useful when you are performing reconnaissance of people working for a company for which you are performing a penetration test.
By discovering the websites the have been registered to, you will get a good idea on their interests and use this information to perform phishing attacks against them, for example send them phishing email posing as one of the websites their are a member of.
So, to hunt usernames on social media using Sherlock is pretty easy.
Sherlock is an open source tool which enables you to find usernames on 322 websites just by entering the desired username and the script will do the discovery for you.
How to Install Sherlock
Sherlock is a tool written in python and the installation is straight forward.
First you clone the repository:
git clone https://github.com/sherlock-project/sherlock.gitThen, you install the requirements:
python3 -m pip install -r requirements.txtHow to Use Sherlock to Hunt a Username:
python3 sherlcok usernamereplace the “username” with the username you want to hunt.
Simple as that.
List of Supported Sites
Here is the long list of supported websites that Sherlock can search through:
- 2Dimensions
- 3dnews
- 7Cups
- 9GAG
- About.me
- Academia.edu
- Airliners
- Alik.cz
- AllMyLinks
- Anilist
- Apple Developer
- Apple Discussions
- Archive.org
- Arduino
- ArtStation
- Asciinema
- Ask Fedora
- AskFM
- Atom Discussions
- Audiojungle
- Avizo
- BLIP.fm
- BOOTH
- Bandcamp
- Bazar.cz
- Behance
- BinarySearch
- BitBucket
- BitCoinForum
- Bitwarden Forum
- Blogger
- BodyBuilding
- BongaCams
- Bookcrossing
- BuyMeACoffee
- BuzzFeed
- CNET
- CapFriendly
- Carbonmade
- Career.habr
- Championat
- Chatujme.cz
- ChaturBate
- Chess
- CloudflareCommunity
- Clozemaster
- Codecademy
- Codechef
- Codepen
- Codewars
- Coil
- ColourLovers
- Contently
- Coroflot
- Countable
- Cracked
- Crevado
- Crowdin
- DEV Community
- DailyMotion
- Designspiration
- DeviantART
- Discogs
- Discuss.Elastic.co
- Disqus
- Docker Hub
- Dribbble
- Duolingo
- Ello
- Etsy
- Euw
- EyeEm
- F3.cool
- Facenama
- FanCentro
- Fandom
- Fiverr
- Flickr
- Flightradar24
- Football
- FortniteTracker
- Fosstodon
- Freelance.habr
- Freelancer
- Freesound
- GNOME VCS
- GaiaOnline
- Gam1ng
- Gamespot
- GetMyUni
- Giphy
- GitHub
- GitHub Support Community
- GitLab
- Gitee
- GoodReads
- Gradle
- Gravatar
- Gumroad
- GunsAndAmmo
- GuruShots
- HEXRPG
- HackTheBox
- Hackaday
- HackerEarth
- HackerNews
- HackerOne
- HackerRank
- Houzz
- HubPages
- Hubski
- ICQ
- IFTTT
- ImgUp.cz
- Imgur
- Instructables
- Issuu
- Itch.io
- Itemfix
- Jellyfin Weblate
- Jimdo
- Kaggle
- Keybase
- Kik
- Kongregate
- LOR
- Launchpad
- LeetCode
- Letterboxd
- Lichess
- Linktree
- LiveJournal
- Lobsters
- Lolchess
- Medium
- Memrise
- MixCloud
- Munzee
- MyAnimeList
- MyMiniFactory
- Myspace
- NICommunityForum
- NationStates Nation
- NationStates Region
- Naver
- Newgrounds
- Nextcloud Forum
- Nightbot
- Ninja Kiwi
- NotABug.org
- Nyaa.si
- OK
- OnlyFans
- OpenStreetMap
- Opensource
- Oracle Community
- Otzovik
- OurDJTalk
- PCGamer
- PCPartPicker
- PSNProfiles.com
- Packagist
- Pastebin
- Patreon
- Periscope
- Pinkbike
- PlayStore
- Pokemon Showdown
- Polarsteps
- Polygon
- Pornhub
- ProductHunt
- PromoDJ
- PyPi
- Quizlet
- Raidforums
- Rajce.net
- Rate Your Music
- Redbubble
- Replit.com
- ResearchGate
- ReverbNation
- Roblox
- RoyalCams
- RubyGems
- RuneScape
- Sbazar.cz
- Scratch
- Scribd
- ShitpostBot5000
- Signal
- Slack
- Slant
- Slashdot
- SlideShare
- Smashcast
- Smule
- Snapchat
- SoundCloud
- SourceForge
- SoylentNews
- Speedrun.com
- Splits.io
- Sporcle
- SportsRU
- Spotify
- Star Citizen
- Steam
- SteamGroup
- Strava
- SublimeForum
- TETR.IO
- TLDR Legal
- Telegram
- Tellonym.me
- Tenor
- TikTok
- Tinder
- TradingView
- Trakt
- TrashboxRU
- Trello
- TryHackMe
- Twitch
- Typeracer
- Ultimate-Guitar
- Unsplash
- VK
- VSCO
- Velomania
- Venmo
- Vero
- Vimeo
- Virgool
- VirusTotal
- WICG Forum
- Warrior Forum
- Wattpad
- We Heart It
- WebNode
- Weblate
- Whonix Forum
- Wikidot
- Wikipedia
- Windy
- Wix
- WordPress
- WordPressOrg
- Wordnik
- Xbox Gamertag
- Xvideos
- YouNow
- YouPic
- YouPorn
- Zhihu
- akniga
- aminoapp
- authorSTREAM
- babyRU
- babyblogRU
- chaos.social
- couchsurfing
- d3RU
- dailykos
- datingRU
- devRant
- drive2
- eGPU
- eintracht
- fixya
- fl
- forum_guns
- forumhouseRU
- geocaching
- gfycat
- habr
- hackster
- hunting
- iMGSRC.RU
- igromania
- interpals
- irecommend
- jbzd.com.pl
- jeuxvideo
- kofi
- kwork
- labpentestit
- last.fm
- leasehackr
- livelib
- mastodon.cloud
- mastodon.social
- mastodon.technology
- mastodon.xyz
- mercadolivre
- metacritic
- moikrug
- mstdn.io
- nairaland.com
- nnRU
- note
- npm
- opennet
- osu!
- phpRU
- pikabu
- pr0gramm
- prog.hu
- radio_echo_msk
- satsisRU
- social.tchncs.de
- spletnik
- svidbook
- toster
- uid
- wiki.vg
- xHamster
- zoomit
Dimitris is an Information Technology and Cybersecurity professional with more than 20 years of experience in designing, building and maintaining efficient and secure IT infrastructures.
Among others, he is a certified: CISSP, CISA, CISM, ITIL, COBIT and PRINCE2, but his wide set of knowledge and technical management capabilities go beyond these certifications. He likes acquiring new skills on penetration testing, cloud technologies, virtualization, network security, IoT and many more.
