diff --git a/public/arf.json b/public/arf.json index e39bd13..a0e78ce 100644 --- a/public/arf.json +++ b/public/arf.json @@ -13,52 +13,202 @@ { "name": "Sylva Identity Discovery (T)", "type": "url", - "url": "https://sylva.pfeister.dev/" + "url": "https://sylva.pfeister.dev/", + "description": "Open-source CLI tool for username and identity discovery with branch discovery to expand searches as additional linked identities are uncovered.", + "status": "live", + "pricing": "free", + "bestFor": "Username enumeration with identity branching", + "input": "Username", + "output": "Linked accounts and identities across platforms", + "opsec": "active", + "opsecNote": "Makes requests to target platforms to check username existence; external API keys may be used.", + "localInstall": true, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": true, + "invitationOnly": false, + "deprecated": false }, { "name": "Sherlock (T)", "type": "url", - "url": "https://github.com/sherlock-project/sherlock" + "url": "https://github.com/sherlock-project/sherlock", + "description": "Python CLI tool that hunts down social media accounts by username across 400+ social networks. Supports Tor routing, proxy configuration, and CSV/XLSX export.", + "status": "live", + "pricing": "free", + "bestFor": "Mass username enumeration across 400+ sites", + "input": "Username(s)", + "output": "List of discovered profile URLs across social networks", + "opsec": "active", + "opsecNote": "Directly queries each target site to check username existence; supports Tor/proxy for anonymity.", + "localInstall": true, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "Namechk", "type": "url", - "url": "https://namechk.com/" + "url": "https://namechk.com/", + "description": "Web-based username and domain availability checker that searches 100+ social media platforms and 36 domain extensions simultaneously.", + "status": "live", + "pricing": "free", + "bestFor": "Quick username availability check across social media and domains", + "input": "Username or domain name", + "output": "Availability status across 100+ platforms and domain extensions", + "opsec": "passive", + "opsecNote": "Searches are routed through Namechk's servers; target accounts are not directly contacted by the user.", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "WhatsMyName (T)", "type": "url", - "url": "https://github.com/WebBreacher/WhatsMyName" + "url": "https://github.com/WebBreacher/WhatsMyName", + "description": "OSINT project maintaining a curated JSON database of website detection patterns for username enumeration. Web interface available at whatsmyname.app.", + "status": "live", + "pricing": "free", + "bestFor": "Username enumeration using community-maintained site detection data", + "input": "Username", + "output": "List of sites where the username exists, based on HTTP response pattern matching", + "opsec": "active", + "opsecNote": "Makes HTTP requests to each target site to check for username existence.", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "Thats Them", "type": "url", - "url": "https://thatsthem.com/" + "url": "https://thatsthem.com/", + "description": "Free people search engine aggregating data from 50+ sources. Supports lookups by name, address, phone number, or email.", + "status": "live", + "pricing": "freemium", + "bestFor": "People search by name, email, phone, or address", + "input": "Name, email address, phone number, or physical address", + "output": "Contact info, residential details, demographics, and financial estimates", + "opsec": "passive", + "opsecNote": "Searches are routed through ThatsThem's servers; the target is not alerted.", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "NameCheckup", "type": "url", - "url": "https://namecheckup.com/" + "url": "https://namecheckup.com/", + "description": "Free web-based username and domain availability checker that searches across 20+ social media platforms and 40+ domain extensions with WHOIS lookup support.", + "status": "live", + "pricing": "free", + "bestFor": "Username and domain availability checking with WHOIS info", + "input": "Username or domain name", + "output": "Availability status across social platforms and domain extensions, with WHOIS data", + "opsec": "passive", + "opsecNote": "Searches are proxied through NameCheckup's servers; no direct contact with target platforms by the user.", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": true, + "invitationOnly": false, + "deprecated": false }, { "name": "GitFive (T)", "type": "url", - "url": "https://github.com/mxrch/GitFive" + "url": "https://github.com/mxrch/GitFive", + "description": "OSINT CLI tool for investigating GitHub profiles. Tracks username/name history, maps emails to accounts, extracts SSH public keys, and exports findings as JSON.", + "status": "live", + "pricing": "free", + "bestFor": "Deep investigation of GitHub user profiles and email-to-account mapping", + "input": "GitHub username or email address", + "output": "Profile history, linked emails, SSH keys, repository analysis, JSON export", + "opsec": "active", + "opsecNote": "Queries GitHub API directly; developer recommends using a secondary GitHub account.", + "localInstall": true, + "googleDork": false, + "registration": true, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "Sherlock", "type": "url", - "url": "https://github.com/sherlock-project/sherlock" + "url": "https://github.com/sherlock-project/sherlock", + "description": "Python CLI tool that hunts down social media accounts by username across 400+ social networks. Supports Tor routing, proxy configuration, and CSV/XLSX export.", + "status": "live", + "pricing": "free", + "bestFor": "Mass username enumeration across 400+ sites", + "input": "Username(s)", + "output": "List of discovered profile URLs across social networks", + "opsec": "active", + "opsecNote": "Directly queries each target site to check username existence; supports Tor/proxy for anonymity.", + "localInstall": true, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "Names Directory", "type": "url", - "url": "https://namesdir.com/" + "url": "https://namesdir.com/", + "description": "Searchable database of 1B+ name combinations collected from public sources. Allows bidirectional lookup to find first names by surname or surnames by first name.", + "status": "live", + "pricing": "free", + "bestFor": "Finding name combinations and frequency data for a given first or last name", + "input": "First name or surname", + "output": "Associated name combinations with frequency counts", + "opsec": "passive", + "opsecNote": "Queries a static public database; no contact with any target individual.", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "Lullar", "type": "url", - "url": "https://com.lullar.com" + "url": "https://com.lullar.com", + "description": "Free people search and username lookup tool that searches across 148+ social media platforms including Instagram, TikTok, Facebook, and LinkedIn.", + "status": "live", + "pricing": "free", + "bestFor": "Social media profile discovery by username, email, or name", + "input": "Email address, full name, or username", + "output": "Social media profiles found across 148+ platforms", + "opsec": "passive", + "opsecNote": "Searches are routed through Lullar's servers; no direct queries from the user to target platforms.", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": false, + "invitationOnly": false, + "deprecated": false } ] }, @@ -69,37 +219,142 @@ { "name": "Amazon Usernames (M)", "type": "url", - "url": "https://www.google.com/search?q=site:amazon.com+%3Cusername%3E" + "url": "https://www.google.com/search?q=site:amazon.com+%3Cusername%3E", + "description": "Google dork that searches Amazon.com for pages associated with a specific username, surfacing public profiles, wishlists, and reviews.", + "status": "live", + "pricing": "free", + "bestFor": "Finding Amazon public profiles, wishlists, and review activity by username", + "input": "Username (inserted into Google search query)", + "output": "Google search results linking to Amazon pages mentioning the username", + "opsec": "passive", + "opsecNote": "Query goes to Google, not Amazon directly. Google may log the search but the target is not alerted.", + "localInstall": false, + "googleDork": true, + "registration": false, + "editUrl": true, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "Github User (M)", "type": "url", - "url": "https://api.github.com/users/%3Cusername%3E/events/public" + "url": "https://api.github.com/users/%3Cusername%3E/events/public", + "description": "Queries the GitHub public Events API to retrieve a user's recent public activity, including pushes, pull requests, issues, and other repository events.", + "status": "live", + "pricing": "free", + "bestFor": "Enumerating a GitHub user's recent public activity and repository interactions", + "input": "GitHub username (inserted into URL path)", + "output": "JSON array of public events (pushes, PRs, issues, comments) with timestamps and repo details", + "opsec": "passive", + "opsecNote": "Unauthenticated API call; GitHub rate-limits by IP (60 req/hr) but does not notify the target user.", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": true, + "api": true, + "invitationOnly": false, + "deprecated": false }, { "name": "Tinder Usernames (M)", "type": "url", - "url": "https://www.gotinder.com/@%3Cusername%3E" + "url": "https://www.gotinder.com/@%3Cusername%3E", + "description": "Accesses a Tinder user's public web profile via their username. The gotinder.com domain redirects to tinder.com.", + "status": "live", + "pricing": "free", + "bestFor": "Confirming existence of a Tinder profile and viewing public profile details", + "input": "Tinder username (appended to URL after @)", + "output": "Public profile page with name, photo, and basic info if the user has web sharing enabled", + "opsec": "passive", + "opsecNote": "Simple HTTP GET to a public page; target is not notified of profile views via the web URL.", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": true, + "api": false, + "invitationOnly": false, + "deprecated": false }, { "name": "Keybase", "type": "url", - "url": "https://keybase.io/" + "url": "https://keybase.io/", + "description": "Platform for cryptographic identity verification, linking social media accounts, PGP keys, and cryptocurrency addresses to a single profile. Acquired by Zoom in 2020 but still operational.", + "status": "live", + "pricing": "free", + "bestFor": "Looking up verified social accounts, PGP keys, and crypto wallets tied to a username", + "input": "Username", + "output": "User profile showing verified identities across platforms, PGP keys, cryptocurrency addresses, and devices", + "opsec": "passive", + "opsecNote": "Public profile lookups are passive web requests. No login required to view profiles.", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": true, + "invitationOnly": false, + "deprecated": false }, { "name": "MIT PGP Key Server", "type": "url", - "url": "https://pgp.mit.edu/" + "url": "https://pgp.mit.edu/", + "description": "MIT PGP Public Key Server for searching, submitting, and removing PGP public keys. Look up keys by name, email, or key ID to find associated cryptographic identities.", + "status": "live", + "pricing": "free", + "bestFor": "Looking up PGP public keys associated with a username or email address", + "input": "Name, email address, or key ID", + "output": "PGP public key data, key fingerprints, associated UIDs/email addresses, and key metadata", + "opsec": "passive", + "opsecNote": "Public key server query; no authentication required and target is not notified of lookups.", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": false, + "api": true, + "invitationOnly": false, + "deprecated": false }, { "name": "ProtonMail users (M)", "type": "url", - "url": "https://api.protonmail.ch/pks/lookup?op=index&search=@protonmail.com" + "url": "https://api.protonmail.ch/pks/lookup?op=index&search=@protonmail.com", + "description": "Queries ProtonMail's HKP-compatible PGP key server to look up the public key for a ProtonMail username. A successful response confirms the account exists.", + "status": "live", + "pricing": "free", + "bestFor": "Confirming whether a ProtonMail username exists and retrieving its PGP public key", + "input": "ProtonMail username (appended with @protonmail.com)", + "output": "PGP key index with public key fingerprint, algorithm, creation timestamp, and email UID", + "opsec": "passive", + "opsecNote": "Unauthenticated API query to ProtonMail's public key server. Target user is not notified. Enables user enumeration.", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": true, + "api": true, + "invitationOnly": false, + "deprecated": false }, { "name": "ProtonMail Domains (M)", "type": "url", - "url": "https://api.protonmail.ch/pks/lookup?op=index&search=" + "url": "https://api.protonmail.ch/pks/lookup?op=index&search=", + "description": "Queries ProtonMail's HKP key server with a full email address to check for a PGP public key. Useful for identifying ProtonMail users on custom domains.", + "status": "live", + "pricing": "free", + "bestFor": "Checking if an email address on a custom domain is hosted on ProtonMail", + "input": "Full email address (any domain that may be hosted on ProtonMail)", + "output": "PGP key index with public key fingerprint, algorithm, creation timestamp, and email UID", + "opsec": "passive", + "opsecNote": "Unauthenticated public HKP endpoint. Target is not notified. Can reveal whether a custom domain uses ProtonMail.", + "localInstall": false, + "googleDork": false, + "registration": false, + "editUrl": true, + "api": true, + "invitationOnly": false, + "deprecated": false } ] }