sherlock/README.md

190 lines
7.7 KiB
Markdown
Raw Normal View History

2019-02-28 08:32:59 +00:00
<p align=center>
2019-04-07 16:26:11 +00:00
2019-02-28 08:32:59 +00:00
<img src="https://user-images.githubusercontent.com/27065646/53551960-ae4dff80-3b3a-11e9-9075-cef786c69364.png"/>
2019-04-07 16:26:11 +00:00
2019-08-10 11:03:37 +00:00
2019-02-28 08:32:59 +00:00
<br>
2019-08-10 11:03:37 +00:00
<span>Hunt down social media accounts by username across <a href="https://github.com/theyahya/sherlock/blob/master/sites.md">social networks</a></span>
2019-02-28 08:32:59 +00:00
<br>
<a target="_blank" href="https://www.python.org/downloads/" title="Python version"><img src="https://img.shields.io/badge/python-%3E=_3.6-green.svg"></a>
<a target="_blank" href="LICENSE" title="License: MIT"><img src="https://img.shields.io/badge/License-MIT-blue.svg"></a>
<a target="_blank" href="https://travis-ci.com/TheYahya/sherlock/" title="Build Status"><img src="https://travis-ci.com/TheYahya/sherlock.svg?branch=master"></a>
<a target="_blank" href="https://twitter.com/intent/tweet?text=%F0%9F%94%8E%20Find%20usernames%20across%20social%20networks%20&url=https://github.com/TheYahya/sherlock&hashtags=hacking,%20osint,%20bugbounty,%20reconnaissance" title="Share on Tweeter"><img src="https://img.shields.io/twitter/url/http/shields.io.svg?style=social"></a>
2019-03-31 15:34:40 +00:00
<a target="_blank" href="http://sherlock-project.github.io/"><img alt="Website" src="https://img.shields.io/website-up-down-green-red/http/sherlock-project.github.io/..svg"></a>
2019-04-24 19:18:33 +00:00
<a target="_blank" href="https://microbadger.com/images/theyahya/sherlock"><img alt="docker image" src="https://images.microbadger.com/badges/version/theyahya/sherlock.svg"></a>
2019-02-28 08:32:59 +00:00
</p>
2019-08-10 11:03:37 +00:00
<p align="center">
<a href="#demo">Demo</a>&nbsp;&nbsp;&nbsp;|&nbsp;&nbsp;&nbsp;<a href="#installation">Installation</a>&nbsp;&nbsp;&nbsp;|&nbsp;&nbsp;&nbsp;<a href="#docker-notes">Docker Notes</a>&nbsp;&nbsp;&nbsp;|&nbsp;&nbsp;&nbsp;<a href="#adding-new-sites">Adding New Sites</a>
</p>
2019-01-23 09:03:25 +00:00
<p align="center">
2019-01-23 21:23:05 +00:00
<a href="https://asciinema.org/a/223115">
2019-07-16 14:33:49 +00:00
<img src="./images/sherlock_preview.gif"/>
2019-01-23 09:03:25 +00:00
</a>
</p>
2019-08-10 11:03:37 +00:00
2018-12-24 18:50:13 +00:00
2019-08-10 11:03:37 +00:00
## Demo
You can use this link to test Sherlock directly in your browser:
https://elody.com/scenario/plan/16/
2018-12-24 18:50:13 +00:00
## Installation
**NOTE**: Python 3.6 or higher is required.
2018-12-24 18:50:13 +00:00
```bash
# clone the repo
$ git clone https://github.com/sherlock-project/sherlock.git
2018-12-24 18:50:13 +00:00
# change the working directory to sherlock
$ cd sherlock
2019-08-09 06:43:06 +00:00
# install python3 and python3-pip if they are not installed
2018-12-24 18:50:13 +00:00
# install the requirements
$ python3 -m pip install -r requirements.txt
2018-12-24 18:50:13 +00:00
```
## Usage
2018-12-24 18:53:11 +00:00
```bash
$ python3 sherlock.py --help
2019-01-26 11:14:05 +00:00
usage: sherlock.py [-h] [--version] [--verbose] [--rank]
[--folderoutput FOLDEROUTPUT] [--output OUTPUT] [--tor]
[--unique-tor] [--csv] [--site SITE_NAME]
2019-01-26 11:14:05 +00:00
[--proxy PROXY_URL] [--json JSON_FILE]
[--proxy_list PROXY_LIST] [--check_proxies CHECK_PROXY]
[--print-found]
USERNAMES [USERNAMES ...]
2019-08-09 06:55:38 +00:00
Sherlock: Find Usernames Across Social Networks (Version 0.7.9)
positional arguments:
USERNAMES One or more usernames to check with social networks.
optional arguments:
-h, --help show this help message and exit
--version Display version information and dependencies.
--verbose, -v, -d, --debug
Display extra debugging information and metrics.
2019-01-26 11:14:05 +00:00
--rank, -r Present websites ordered by their Alexa.com global
rank in popularity.
2019-01-25 15:10:03 +00:00
--folderoutput FOLDEROUTPUT, -fo FOLDEROUTPUT
If using multiple usernames, the output of the results
will be saved at this folder.
--output OUTPUT, -o OUTPUT
If using single username, the output of the result
will be saved at this file.
--tor, -t Make requests over Tor; increases runtime; requires
Tor to be installed and in system path.
--unique-tor, -u Make requests over Tor with new Tor circuit after each
request; increases runtime; requires Tor to be
installed and in system path.
2018-12-29 04:55:13 +00:00
--csv Create Comma-Separated Values (CSV) File.
--site SITE_NAME Limit analysis to just the listed sites. Add multiple
options to specify more than one site.
--proxy PROXY_URL, -p PROXY_URL
Make requests over a proxy. e.g.
socks5://127.0.0.1:1080
--json JSON_FILE, -j JSON_FILE
2019-01-25 15:10:03 +00:00
Load data from a JSON file or an online, valid, JSON
file.
--proxy_list PROXY_LIST, -pl PROXY_LIST
Make requests over a proxy randomly chosen from a list
generated from a .csv file.
--check_proxies CHECK_PROXY, -cp CHECK_PROXY
To be used with the '--proxy_list' parameter. The
script will check if the proxies supplied in the .csv
file are working and anonymous.Put 0 for no limit on
successfully checked proxies, or another number to
institute a limit.
--print-found Do not output sites where the username was not found.
```
2019-08-09 06:43:06 +00:00
For example to search for only one user:
2019-07-11 19:26:57 +00:00
```
python3 sherlock.py user123
```
2019-07-11 19:26:57 +00:00
2019-07-19 14:50:36 +00:00
To search for more than one user:
2019-07-11 19:26:57 +00:00
```
python3 sherlock.py user1 user2 user3
```
2018-12-24 18:50:13 +00:00
2019-07-19 14:50:36 +00:00
All of the accounts found will be stored in an individual text file with the corresponding username (e.g ```user123.txt```).
2018-12-31 20:53:27 +00:00
## Docker Notes
If you have docker installed you can build an image and run this as a container.
```
docker build -t mysherlock-image .
```
2019-08-09 06:43:06 +00:00
Once the image is built, sherlock can be invoked by running the following:
2018-12-31 20:53:27 +00:00
```
docker run --rm -t mysherlock-image user123
2018-12-31 20:53:27 +00:00
```
2019-08-09 06:43:06 +00:00
The optional ```--rm``` flag removes the container filesystem on completion to prevent cruft build-up. See: https://docs.docker.com/engine/reference/run/#clean-up---rm
2018-12-31 20:53:27 +00:00
2019-08-09 06:43:06 +00:00
The optional ```-t``` flag allocates a pseudo-TTY which allows colored output. See: https://docs.docker.com/engine/reference/run/#foreground
2018-12-31 20:53:27 +00:00
It is possible to use the following command to access the saved results:
```
docker run --rm -t -v "$PWD/results:/opt/sherlock/results" mysherlock-image -o /opt/sherlock/results/text.txt user123
```
2019-08-09 06:43:06 +00:00
The ```-v "$PWD/results:/opt/sherlock/results"``` option tells docker to create (or use) the folder `results` in the
present working directory and to mount it at `/opt/sherlock/results` on the docker container.
2019-08-09 06:43:06 +00:00
The `-o /opt/sherlock/results/text.txt` option tells `sherlock` to output the result.
2019-01-04 08:10:28 +00:00
2019-01-04 09:45:17 +00:00
Or you can simply use "Docker Hub" to run `sherlock`:
2019-01-04 08:10:28 +00:00
```
docker run theyahya/sherlock user123
```
## Adding New Sites
Please look at the Wiki entry on
[adding new sites](https://github.com/TheYahya/sherlock/wiki/Adding-Sites-To-Sherlock)
to understand the issues.
**NOTE**: Sherlock is not accepting adult sites in the standard list.
## Tests
If you are contributing to Sherlock, then Thank You!
Before creating a pull request with new development, please run the tests
2019-08-09 06:43:06 +00:00
to ensure that everything is working great. It would also be a good idea to run the tests
before starting development to distinguish problems between your
environment and the Sherlock software.
The following is an example of the command line to run all the tests for
Sherlock. This invocation hides the progress text that Sherlock normally
outputs, and instead shows the verbose output of the tests.
```
$ python3 -m unittest tests.all --buffer --verbose
```
2019-04-07 16:26:11 +00:00
Note that we do currently have 100% test coverage. Unfortunately, some of
2019-08-09 06:43:06 +00:00
the sites that Sherlock checks are not always reliable, so it is common
2019-04-07 16:26:11 +00:00
to get response errors.
2019-02-24 07:06:51 +00:00
## Stargazers over time
[![Stargazers over time](https://starcharts.herokuapp.com/TheYahya/sherlock.svg)](https://starcharts.herokuapp.com/TheYahya/sherlock)
2018-12-24 18:50:13 +00:00
## License
MIT © [Yahya SayadArbabi](https://theyahya.com)<br/>
Original Creator - [Siddharth Dushantha](https://github.com/sdushantha)