mirror of
https://github.com/lockfale/OSINT-Framework.git
synced 2026-09-10 03:37:45 +02:00
Enrich Username tools with descriptions, badges, and OPSEC data (THE-113)
Populate enrichment fields for all 17 tools in the Username category (Username Search Engines + Specific Sites). Each tool now includes description, status, pricing, bestFor, input/output, opsec rating, and badge flags (localInstall, googleDork, registration, editUrl, api, invitationOnly, deprecated). All URLs verified as live on 2026-03-26. Co-Authored-By: Paperclip <noreply@paperclip.ing>
This commit is contained in:
s0lray
+272
-17
@@ -13,52 +13,202 @@
|
||||
{
|
||||
"name": "Sylva Identity Discovery (T)",
|
||||
"type": "url",
|
||||
"url": "https://sylva.pfeister.dev/"
|
||||
"url": "https://sylva.pfeister.dev/",
|
||||
"description": "Open-source CLI tool for username and identity discovery with branch discovery to expand searches as additional linked identities are uncovered.",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"bestFor": "Username enumeration with identity branching",
|
||||
"input": "Username",
|
||||
"output": "Linked accounts and identities across platforms",
|
||||
"opsec": "active",
|
||||
"opsecNote": "Makes requests to target platforms to check username existence; external API keys may be used.",
|
||||
"localInstall": true,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": true,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "Sherlock (T)",
|
||||
"type": "url",
|
||||
"url": "https://github.com/sherlock-project/sherlock"
|
||||
"url": "https://github.com/sherlock-project/sherlock",
|
||||
"description": "Python CLI tool that hunts down social media accounts by username across 400+ social networks. Supports Tor routing, proxy configuration, and CSV/XLSX export.",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"bestFor": "Mass username enumeration across 400+ sites",
|
||||
"input": "Username(s)",
|
||||
"output": "List of discovered profile URLs across social networks",
|
||||
"opsec": "active",
|
||||
"opsecNote": "Directly queries each target site to check username existence; supports Tor/proxy for anonymity.",
|
||||
"localInstall": true,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "Namechk",
|
||||
"type": "url",
|
||||
"url": "https://namechk.com/"
|
||||
"url": "https://namechk.com/",
|
||||
"description": "Web-based username and domain availability checker that searches 100+ social media platforms and 36 domain extensions simultaneously.",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"bestFor": "Quick username availability check across social media and domains",
|
||||
"input": "Username or domain name",
|
||||
"output": "Availability status across 100+ platforms and domain extensions",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Searches are routed through Namechk's servers; target accounts are not directly contacted by the user.",
|
||||
"localInstall": false,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "WhatsMyName (T)",
|
||||
"type": "url",
|
||||
"url": "https://github.com/WebBreacher/WhatsMyName"
|
||||
"url": "https://github.com/WebBreacher/WhatsMyName",
|
||||
"description": "OSINT project maintaining a curated JSON database of website detection patterns for username enumeration. Web interface available at whatsmyname.app.",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"bestFor": "Username enumeration using community-maintained site detection data",
|
||||
"input": "Username",
|
||||
"output": "List of sites where the username exists, based on HTTP response pattern matching",
|
||||
"opsec": "active",
|
||||
"opsecNote": "Makes HTTP requests to each target site to check for username existence.",
|
||||
"localInstall": false,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "Thats Them",
|
||||
"type": "url",
|
||||
"url": "https://thatsthem.com/"
|
||||
"url": "https://thatsthem.com/",
|
||||
"description": "Free people search engine aggregating data from 50+ sources. Supports lookups by name, address, phone number, or email.",
|
||||
"status": "live",
|
||||
"pricing": "freemium",
|
||||
"bestFor": "People search by name, email, phone, or address",
|
||||
"input": "Name, email address, phone number, or physical address",
|
||||
"output": "Contact info, residential details, demographics, and financial estimates",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Searches are routed through ThatsThem's servers; the target is not alerted.",
|
||||
"localInstall": false,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "NameCheckup",
|
||||
"type": "url",
|
||||
"url": "https://namecheckup.com/"
|
||||
"url": "https://namecheckup.com/",
|
||||
"description": "Free web-based username and domain availability checker that searches across 20+ social media platforms and 40+ domain extensions with WHOIS lookup support.",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"bestFor": "Username and domain availability checking with WHOIS info",
|
||||
"input": "Username or domain name",
|
||||
"output": "Availability status across social platforms and domain extensions, with WHOIS data",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Searches are proxied through NameCheckup's servers; no direct contact with target platforms by the user.",
|
||||
"localInstall": false,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": true,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "GitFive (T)",
|
||||
"type": "url",
|
||||
"url": "https://github.com/mxrch/GitFive"
|
||||
"url": "https://github.com/mxrch/GitFive",
|
||||
"description": "OSINT CLI tool for investigating GitHub profiles. Tracks username/name history, maps emails to accounts, extracts SSH public keys, and exports findings as JSON.",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"bestFor": "Deep investigation of GitHub user profiles and email-to-account mapping",
|
||||
"input": "GitHub username or email address",
|
||||
"output": "Profile history, linked emails, SSH keys, repository analysis, JSON export",
|
||||
"opsec": "active",
|
||||
"opsecNote": "Queries GitHub API directly; developer recommends using a secondary GitHub account.",
|
||||
"localInstall": true,
|
||||
"googleDork": false,
|
||||
"registration": true,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "Sherlock",
|
||||
"type": "url",
|
||||
"url": "https://github.com/sherlock-project/sherlock"
|
||||
"url": "https://github.com/sherlock-project/sherlock",
|
||||
"description": "Python CLI tool that hunts down social media accounts by username across 400+ social networks. Supports Tor routing, proxy configuration, and CSV/XLSX export.",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"bestFor": "Mass username enumeration across 400+ sites",
|
||||
"input": "Username(s)",
|
||||
"output": "List of discovered profile URLs across social networks",
|
||||
"opsec": "active",
|
||||
"opsecNote": "Directly queries each target site to check username existence; supports Tor/proxy for anonymity.",
|
||||
"localInstall": true,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "Names Directory",
|
||||
"type": "url",
|
||||
"url": "https://namesdir.com/"
|
||||
"url": "https://namesdir.com/",
|
||||
"description": "Searchable database of 1B+ name combinations collected from public sources. Allows bidirectional lookup to find first names by surname or surnames by first name.",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"bestFor": "Finding name combinations and frequency data for a given first or last name",
|
||||
"input": "First name or surname",
|
||||
"output": "Associated name combinations with frequency counts",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Queries a static public database; no contact with any target individual.",
|
||||
"localInstall": false,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "Lullar",
|
||||
"type": "url",
|
||||
"url": "https://com.lullar.com"
|
||||
"url": "https://com.lullar.com",
|
||||
"description": "Free people search and username lookup tool that searches across 148+ social media platforms including Instagram, TikTok, Facebook, and LinkedIn.",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"bestFor": "Social media profile discovery by username, email, or name",
|
||||
"input": "Email address, full name, or username",
|
||||
"output": "Social media profiles found across 148+ platforms",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Searches are routed through Lullar's servers; no direct queries from the user to target platforms.",
|
||||
"localInstall": false,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
}
|
||||
]
|
||||
},
|
||||
@@ -69,37 +219,142 @@
|
||||
{
|
||||
"name": "Amazon Usernames (M)",
|
||||
"type": "url",
|
||||
"url": "https://www.google.com/search?q=site:amazon.com+%3Cusername%3E"
|
||||
"url": "https://www.google.com/search?q=site:amazon.com+%3Cusername%3E",
|
||||
"description": "Google dork that searches Amazon.com for pages associated with a specific username, surfacing public profiles, wishlists, and reviews.",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"bestFor": "Finding Amazon public profiles, wishlists, and review activity by username",
|
||||
"input": "Username (inserted into Google search query)",
|
||||
"output": "Google search results linking to Amazon pages mentioning the username",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Query goes to Google, not Amazon directly. Google may log the search but the target is not alerted.",
|
||||
"localInstall": false,
|
||||
"googleDork": true,
|
||||
"registration": false,
|
||||
"editUrl": true,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "Github User (M)",
|
||||
"type": "url",
|
||||
"url": "https://api.github.com/users/%3Cusername%3E/events/public"
|
||||
"url": "https://api.github.com/users/%3Cusername%3E/events/public",
|
||||
"description": "Queries the GitHub public Events API to retrieve a user's recent public activity, including pushes, pull requests, issues, and other repository events.",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"bestFor": "Enumerating a GitHub user's recent public activity and repository interactions",
|
||||
"input": "GitHub username (inserted into URL path)",
|
||||
"output": "JSON array of public events (pushes, PRs, issues, comments) with timestamps and repo details",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Unauthenticated API call; GitHub rate-limits by IP (60 req/hr) but does not notify the target user.",
|
||||
"localInstall": false,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": true,
|
||||
"api": true,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "Tinder Usernames (M)",
|
||||
"type": "url",
|
||||
"url": "https://www.gotinder.com/@%3Cusername%3E"
|
||||
"url": "https://www.gotinder.com/@%3Cusername%3E",
|
||||
"description": "Accesses a Tinder user's public web profile via their username. The gotinder.com domain redirects to tinder.com.",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"bestFor": "Confirming existence of a Tinder profile and viewing public profile details",
|
||||
"input": "Tinder username (appended to URL after @)",
|
||||
"output": "Public profile page with name, photo, and basic info if the user has web sharing enabled",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Simple HTTP GET to a public page; target is not notified of profile views via the web URL.",
|
||||
"localInstall": false,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": true,
|
||||
"api": false,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "Keybase",
|
||||
"type": "url",
|
||||
"url": "https://keybase.io/"
|
||||
"url": "https://keybase.io/",
|
||||
"description": "Platform for cryptographic identity verification, linking social media accounts, PGP keys, and cryptocurrency addresses to a single profile. Acquired by Zoom in 2020 but still operational.",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"bestFor": "Looking up verified social accounts, PGP keys, and crypto wallets tied to a username",
|
||||
"input": "Username",
|
||||
"output": "User profile showing verified identities across platforms, PGP keys, cryptocurrency addresses, and devices",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Public profile lookups are passive web requests. No login required to view profiles.",
|
||||
"localInstall": false,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": true,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "MIT PGP Key Server",
|
||||
"type": "url",
|
||||
"url": "https://pgp.mit.edu/"
|
||||
"url": "https://pgp.mit.edu/",
|
||||
"description": "MIT PGP Public Key Server for searching, submitting, and removing PGP public keys. Look up keys by name, email, or key ID to find associated cryptographic identities.",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"bestFor": "Looking up PGP public keys associated with a username or email address",
|
||||
"input": "Name, email address, or key ID",
|
||||
"output": "PGP public key data, key fingerprints, associated UIDs/email addresses, and key metadata",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Public key server query; no authentication required and target is not notified of lookups.",
|
||||
"localInstall": false,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": false,
|
||||
"api": true,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "ProtonMail users (M)",
|
||||
"type": "url",
|
||||
"url": "https://api.protonmail.ch/pks/lookup?op=index&search=<username>@protonmail.com"
|
||||
"url": "https://api.protonmail.ch/pks/lookup?op=index&search=<username>@protonmail.com",
|
||||
"description": "Queries ProtonMail's HKP-compatible PGP key server to look up the public key for a ProtonMail username. A successful response confirms the account exists.",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"bestFor": "Confirming whether a ProtonMail username exists and retrieving its PGP public key",
|
||||
"input": "ProtonMail username (appended with @protonmail.com)",
|
||||
"output": "PGP key index with public key fingerprint, algorithm, creation timestamp, and email UID",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Unauthenticated API query to ProtonMail's public key server. Target user is not notified. Enables user enumeration.",
|
||||
"localInstall": false,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": true,
|
||||
"api": true,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
},
|
||||
{
|
||||
"name": "ProtonMail Domains (M)",
|
||||
"type": "url",
|
||||
"url": "https://api.protonmail.ch/pks/lookup?op=index&search=<email_address>"
|
||||
"url": "https://api.protonmail.ch/pks/lookup?op=index&search=<email_address>",
|
||||
"description": "Queries ProtonMail's HKP key server with a full email address to check for a PGP public key. Useful for identifying ProtonMail users on custom domains.",
|
||||
"status": "live",
|
||||
"pricing": "free",
|
||||
"bestFor": "Checking if an email address on a custom domain is hosted on ProtonMail",
|
||||
"input": "Full email address (any domain that may be hosted on ProtonMail)",
|
||||
"output": "PGP key index with public key fingerprint, algorithm, creation timestamp, and email UID",
|
||||
"opsec": "passive",
|
||||
"opsecNote": "Unauthenticated public HKP endpoint. Target is not notified. Can reveal whether a custom domain uses ProtonMail.",
|
||||
"localInstall": false,
|
||||
"googleDork": false,
|
||||
"registration": false,
|
||||
"editUrl": true,
|
||||
"api": true,
|
||||
"invitationOnly": false,
|
||||
"deprecated": false
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user