Sherlock.py

By on

In this blog:

  • What is Sherlock.py?
  • Installation.
  • Usage.

What is Sherlock?


Sherlock is a Python based tool allowing you to hunt down user accounts under a certain username on different social media platforms.


Sherlock can be run from Replit or Google cloud shell (although the option for cloud operation doesn't seem to be available on the GitHub page anymore.


You can run this tool on any operating system including Linux distros and Windows terminal from Windows 7 and later.


Hundreds of websites, including NSFW, (currently 407) are used to search for matching usernames across various social media accounts.



Image showing GitHub page.
Websites used by Sherlock. Click to see more.




Installation



Click here to check out the GitHub page where you can download it➡️    https://github.com/sherlock-project/sherlock. 


Click Download ZIP. A file named Sherlock-master.zip will be downloaded. 



Image showing GitHub page.
Sherlock GitHub page.

Image showing zip file.
Sherlock zip file download.





Extract the zip file into your chosen directory and file location.



Image showing extracted files.
Extracted zip file.



In the file path bar, type CMD and enter. This will open a command line prompt within this folder location.

 

You might find yourself in the C drive when the shell opens up so you must navigate to the sherlock directory where you extracted the ZIP file.



Usage



Type pip install -r requirements.txt.

 

If you are not in the correct location, you will get an error (ERRN02) saying there is no such file or directory. 



Image showing error message.
Error saying we are not in the correct directory.


Cd to the correct file location and type the command pip install -r requirements.txt again.

 

Installing the requirements.txt file from the sherlock directory is just an easy way of specifying a whole environment to be installed – pip will automatically install all dependencies required to run Sherlock instead of you having to install each one separately yourself.

 

This method will also ensure that you install the latest versions of all dependencies as pip retrieves the latest version of each package by default. 



Image showing Linux commands.
Installing requirements.


Now that you have all the required packages installed, you can start using Sherlock. Type python sherlock/ <USERNAME>.

 

Note, you can find other sherlock parameters by typing python sherlock/ --help. 



Image showing Linux commands.
Example usage of Sherlock.


This command searches for a user with the name 'username'.

 

The --print-found option will print all found websites in terminal. 


Shone is a Cyber Security student at the Manchester Metropolitan University. Shone started writing blogs to document his own learning and help others along the way.

Comments

Post a Comment

Popular posts from this blog

Connecting Metasploitable to Kali Linux

By on
Image
  In this blog: Pre-text. Setting up NAT Network. Connected. What's next? This blog is one of a 4 part series in Metasploitable. Click here to see how to run a DOS attack on Metasploitable. Click here to see how to deface Metasploitable's webpage. Click here to see how to fix a common timer error that occurs during bootup .  Pre-text This blog comes after the tutorial on creating a Metasploitable virtual machine and solving the kernel timer error. Setting up a NAT Network In our Linux machine, I checked the network interfaces on the system and I have a tunnel connection that I set up earlier for Openvpn access.  To terminate this connection, type ➡️  sudo killall openvpn . Killing Openvpn connections. Now to connect the metasploitable machine to the kali Linux machine we must create a NAT Network.  We want to make sure that the machine is not able to communicate with connections outside the host. Go to file ➡️...
Read more

Fixing kernel timer error in Metasploitable

By on
Image
In this blog: Disclaimer. Fixing the kernel timer error. What's next? This blog is one of a 4 part series in Metasploitable. Click here to see how to run a DOS attack on Metasploitable. Click here to see how to deface Metasploitable's webpage. Click here to see how to set up a Metasploitable lab . Click here to see how to connect Metasploitable with Kali Linux . Disclaimer The solution given in this blog is for the kernel timer error that is caused by a misconfiguration in the kernel boot settings in the BIOS. The solution is not permanent and you must complete the steps each time you start a new session. Fixing timer errors To start the virtual machine, go back to VirtualBox and click start. When starting, if you get this kernel panic – not syncing error message, follow these steps ➡️  Kernel panick error message. Go to settings, system and double the base memory to 2048MB. Doubling base memory. Provide the machine with two processors instead of one and click OK.  Doubling p...
Read more

Wireshark alternative ➡️ tcpdump (Linux)

By on
Image
In this blog: What is tcpdump? Installation. Usage. Saving captures to a file. Filtering output. Expressions. Understanding the output. Packet content.   The end? See my Wireshark blog here. See my blog on uncovering network attacks using Wireshark here.                                   What is tcpdump? Tcpdump is a command line alternative to Wireshark and runs natively on Linux based operating systems.  The tool is not as feature rich as Wireshark but can be faster and more efficient in capturing and displaying packets, hence why many network admins and security professionals like using tcpdump for quick analysis.  Being a command line tool allows it to be run on remote servers to troubleshoot networks where a gui may not be available. The .PCAP files can then be analysed with Wireshark later. Most Linux distributions come with tcpdump installed, so your distro might already have it d...
Read more