Hunt down social media accounts with Sherlock

Sherlock is a powerful command line tool that can be used to find usernames across many websites and social networks. It works on Linux, MacOS and Windows.

Installation

To install Sherlock, follow the instructions below. Make sure that you have Python3-pip and Python 3.6 or above installed. You can find Sherlock's github here.

On all platforms
~$ git clone https://github.com/sherlock-project/sherlock.git
~$ cd sherlock
~/sherlock$ pip3 install -r requirements.txt

# On Linux
~$ sudo apt install sherlock

Once installed, you can run Sherlock by python3 sherlock.py -h.

~$ python3 sherlock.py -h                                                 
usage: sherlock [-h] [--version] [--verbose] [--folderoutput FOLDEROUTPUT] [--output OUTPUT] [--tor] [--unique-tor] [--csv] [--site SITE_NAME] [--proxy PROXY_URL] [--json JSON_FILE] [--timeout TIMEOUT] [--print-all] [--print-found]
                [--no-color] [--browse] [--local]
                USERNAMES [USERNAMES ...]

Sherlock: Find Usernames Across Social Networks (Version 0.14.0)

positional arguments:
  USERNAMES             One or more usernames to check with social networks.

options:
  -h, --help            show this help message and exit
  --version             Display version information and dependencies.
  --verbose, -v, -d, --debug
                        Display extra debugging information and metrics.
  --folderoutput FOLDEROUTPUT, -fo FOLDEROUTPUT
                        If using multiple usernames, the output of the results will be saved to this folder.
  --output OUTPUT, -o OUTPUT
                        If using single username, the output of the result will be saved to this file.
  --tor, -t             Make requests over Tor; increases runtime; requires Tor to be installed and in system path.
  --unique-tor, -u      Make requests over Tor with new Tor circuit after each request; increases runtime; requires Tor to be installed and in system path.
  --csv                 Create Comma-Separated Values (CSV) File.
  --site SITE_NAME      Limit analysis to just the listed sites. Add multiple options to specify more than one site.
  --proxy PROXY_URL, -p PROXY_URL
                        Make requests over a proxy. e.g. socks5://127.0.0.1:1080
  --json JSON_FILE, -j JSON_FILE
                        Load data from a JSON file or an online, valid, JSON file.
  --timeout TIMEOUT     Time (in seconds) to wait for response to requests. Default timeout is infinity. A longer timeout will be more likely to get results from slow sites. On the other hand, this may cause a long delay to gather
                        all results.
  --print-all           Output sites where the username was not found.
  --print-found         Output sites where the username was found.
  --no-color            Don't color terminal output
  --browse, -b          Browse to all results on default browser.
  --local, -l           Force the use of the local data.json file.

You can see that their is many useful options. Notably tor and the proxy flag.

If you installed it using the apt method; all you have to do is type sherlock.

~$ sherlock dingo418
[*] Checking username dingo418 on:
[+] Coil: https://coil.com/u/dingo418
[+] Fiverr: https://www.fiverr.com/dingo418
[+] GitHub: https://www.github.com/dingo418
[+] HackerOne: https://hackerone.com/dingo418
[+] Minecraft: https://api.mojang.com/users/profiles/minecraft/dingo418
[+] PCPartPicker: https://pcpartpicker.com/user/dingo418
[+] Pinterest: https://www.pinterest.com/dingo418/
[+] Scratch: https://scratch.mit.edu/users/dingo418
[+] TikTok: https://tiktok.com/@dingo418
[+] TradingView: https://www.tradingview.com/u/dingo418/
[+] Zhihu: https://www.zhihu.com/people/dingo418
[+] eBay.com: https://www.ebay.com/usr/dingo418
[+] eBay.de: https://www.ebay.de/usr/dingo418

Hunt down accounts

Now all you have to do is choose your target. In this example i have chosen BobSege. The --timeout 10 flag forces Sherlock to skip a website after 10 seconds of no response. I always recommend to add it on.

~$ python3 sherlock.py bobseger --timeout 10
[+] 9GAG: https://www.9gag.com/u/bobseger
[+] Academia.edu: https://independent.academia.edu/bobseger
[+] Apple Developer: https://developer.apple.com/forums/profile/bobseger
[+] Apple Discussions: https://discussions.apple.com/profile/bobseger
[+] Archive.org: https://archive.org/details/@bobseger
[+] AskFM: https://ask.fm/bobseger
[+] Behance: https://www.behance.net/bobseger
[+] Blogger: https://bobseger.blogspot.com
[+] BodyBuilding: https://bodyspace.bodybuilding.com/bobseger
[+] ChaturBate: https://chaturbate.com/bobseger
[+] Clubhouse: https://www.clubhouse.com/@bobseger
[+] Codecademy: https://www.codecademy.com/profiles/bobseger
[+] Coil: https://coil.com/u/bobseger
[+] DailyMotion: https://www.dailymotion.com/bobseger
[+] DeviantART: https://bobseger.deviantart.com
[+] Discogs: https://www.discogs.com/user/bobseger
[+] Disqus: https://disqus.com/bobseger
[+] Docker Hub: https://hub.docker.com/u/bobseger/
[+] Duolingo: https://www.duolingo.com/profile/bobseger
[+] Facebook: https://www.facebook.com/bobseger
[+] Fiverr: https://www.fiverr.com/bobseger
[+] Flipboard: https://flipboard.com/@bobseger
[+] FortniteTracker: https://fortnitetracker.com/profile/all/bobseger
[+] Freesound: https://freesound.org/people/bobseger/
[+] G2G: https://www.g2g.com/bobseger
[+] GaiaOnline: https://www.gaiaonline.com/profiles/bobseger
[+] Genius (Artists): https://genius.com/artists/bobseger
[+] Giphy: https://giphy.com/bobseger
[+] GitHub: https://www.github.com/bobseger
[+] GoodReads: https://www.goodreads.com/bobseger
[+] Gravatar: http://en.gravatar.com/bobseger
[+] Imgur: https://imgur.com/user/bobseger
[+] Instagram: https://www.instagram.com/bobseger
[+] Issuu: https://issuu.com/bobseger
[+] Kik: https://kik.me/bobseger
[+] Kongregate: https://www.kongregate.com/accounts/bobseger
[+] Linktree: https://linktr.ee/bobseger
[+] Minecraft: https://api.mojang.com/users/profiles/minecraft/bobseger
[+] Munzee: https://www.munzee.com/m/bobseger
[+] MyMiniFactory: https://www.myminifactory.com/users/bobseger
[+] Myspace: https://myspace.com/bobseger
[+] Naver: https://blog.naver.com/bobseger
[+] Newgrounds: https://bobseger.newgrounds.com
[+] PCPartPicker: https://pcpartpicker.com/user/bobseger
[+] Periscope: https://www.periscope.tv/bobseger/
[+] Pinterest: https://www.pinterest.com/bobseger/
[+] Pokemon Showdown: https://pokemonshowdown.com/users/bobseger
[+] Pornhub: https://pornhub.com/users/bobseger
[+] Quizlet: https://quizlet.com/bobseger
[+] Rate Your Music: https://rateyourmusic.com/~bobseger
[+] Redbubble: https://www.redbubble.com/people/bobseger
[+] Reddit: https://www.reddit.com/user/bobseger
[+] ReverbNation: https://www.reverbnation.com/bobseger
[+] Roblox: https://www.roblox.com/user.aspx?username=bobseger
[+] Scratch: https://scratch.mit.edu/users/bobseger
[+] Scribd: https://www.scribd.com/bobseger
[+] SlideShare: https://slideshare.net/bobseger
[+] Smule: https://www.smule.com/bobseger
[+] SoundCloud: https://soundcloud.com/bobseger
[+] Telegram: https://t.me/bobseger
[+] Tenor: https://tenor.com/users/bobseger
[+] TikTok: https://tiktok.com/@bobseger
[+] TradingView: https://www.tradingview.com/u/bobseger/
[+] Trello: https://trello.com/bobseger
[+] Twitch: https://www.twitch.tv/bobseger
[+] Twitter: https://twitter.com/bobseger
[+] VSCO: https://vsco.co/bobseger
[+] Wattpad: https://www.wattpad.com/user/bobseger
[+] Wikipedia: https://en.wikipedia.org/wiki/Special:CentralAuth/bobseger?uselang=qqx
[+] WordPress: https://bobseger.wordpress.com/
[+] Xbox Gamertag: https://xboxgamertag.com/search/bobseger
[+] Xvideos: https://xvideos.com/profiles/bobseger
[+] YouNow: https://www.younow.com/bobseger/
[+] YouPorn: https://youporn.com/uservids/bobseger
[+] Zhihu: https://www.zhihu.com/people/bobseger
[+] eBay.com: https://www.ebay.com/usr/bobseger
[+] eBay.de: https://www.ebay.de/usr/bobseger
[+] jeuxvideo: http://www.jeuxvideo.com/profil/bobseger?mode=infos
[+] last.fm: https://last.fm/user/bobseger
[+] mercadolivre: https://www.mercadolivre.com.br/perfil/bobseger
[+] xHamster: https://xhamster.com/users/bobseger

You can find out a lot about your target. In addition, Sherlock also lets you search multiple usernames at once by simply adding a space to your search like below.

~$ python3 sherlock.py dingo dingoo --timeout 10

Useful flags

There is a few other useful flags contained in Sherlock. Here are a couple:

Proxy (-p)

-p allows you to specify a proxy. The proxy has to be in the syntax of -p [TYPE-OF-PROXY]://[IP]:[PORT]. An example is below:

~$ python3 sherlock.py bobseger --timeout 10 -p socks5://127.0.0.1:1080

Tor (-t)

-t allows you to run Sherlock over tor. You will need to be running tor on your current machine and have it added to your system path.

~$ python3 sherlock.py bobseger --timeout 10 -t

Output (-o)

-o allows you to specify an output file for all the positive sites.

~$ python3 sherlock.py dingo418 --timeout 10 -o dingo418.txt
~$ cat dingo418.txt
https://coil.com/u/dingo418
https://www.fiverr.com/dingo418
https://www.github.com/dingo418
https://hackerone.com/dingo418
https://api.mojang.com/users/profiles/minecraft/dingo418
https://pcpartpicker.com/user/dingo418
https://www.pinterest.com/dingo418/
https://scratch.mit.edu/users/dingo418
https://tiktok.com/@dingo418
https://www.tradingview.com/u/dingo418/
https://twitter.com/dingo418
https://www.zhihu.com/people/dingo418
https://www.ebay.com/usr/dingo418
https://www.ebay.de/usr/dingo418

Browser (-b)

-b allows you to automatically open up all the results onto your default browser

~$ python3 sherlock.py bobseger --timeout 10 -b

Ending Notes

Sherlock is a very powerful OSINT tool that is a lot of fun to play around with. You can find a lot about a person

I hope you enjoyed this guide for Sherlock for find social media accounts. If you have any questions you can always leave a comment below or feel free to reach out to me on Twitter @dingo418.

Joshua Cole's Blog