sherlock

by sherlock-project

71.9Kstars

8.5Kforks

1.2Kwatchers

Updated about 1 month ago

About

Sherlock is a powerful command-line tool for uncovering social media profiles associated with a given username across numerous platforms.

Hunt down social media accounts by username across social networks

Primary Use Case

This tool is invaluable for cybersecurity professionals, threat intelligence analysts, and investigators who need to quickly identify and gather information on individuals or entities across the social web. It automates the tedious process of searching for a username on various social media sites, providing a centralized list of potential profiles.

Key Features

Username enumeration across hundreds of social media sites
Identifies potential social media accounts by username
Provides a comprehensive list of found profiles
Supports custom site lists for targeted searches
Offers various output formats for analysis

Installation

git clone https://github.com/sherlock-project/sherlock.git
cd sherlock
python -m pip install -r requirements.txt

Usage

>_ python sherlock <username>

Searches for the specified username across all supported social media sites.

>_ python sherlock <username1> <username2>

Searches for multiple usernames simultaneously.

>_ python sherlock <username> --site <site_name>

Searches for the username on a specific social media site.

>_ python sherlock <username> --rankslow

Searches for the username on sites with a lower probability of being found.

>_ python sherlock <username> --csv <output_file.csv>

Saves the results to a CSV file.

>_ python sherlock <username> --json <output_file.json>

Saves the results to a JSON file.

Security Frameworks

Reconnaissance

Discovery

Usage Insights

Integrate Sherlock with Maltego for visualizing social media connections and expanding investigations.
Use Sherlock output to enrich threat intelligence platforms (TIPs) with social media data.
Automate Sherlock scans with a scripting language like Python to monitor new account creations or changes.
Combine Sherlock with other OSINT tools like SpiderFoot or theHarvester for comprehensive digital footprint analysis.
Leverage Sherlock findings for phishing campaigns or social engineering attacks (red team).