XhdZddlZ ddlmZddlZddlZddl Z ddl Z ddl Z ddl mZmZddlmZdd lmZdd lmZddlZdd lmZdd lmZmZmZmZdd lmZddlm Z ddl!m"Z"ddl!m#Z#ddl$m%Z%ddl&m'Z'ddl m(Z(GddeZ)dZ*dZ+dZ,gdZ-dZ. d(de/de0de"de1de1d e1d!ee/d"e2fd#Z3d$Z4d%Z5d&Z6e7d'k(re6yy#e$r%ededej dYwxYw))z Sherlock: Find Usernames Across Social Networks Module This module contains the main logic to search for usernames at social networks. N)import_error_test_varz=Did you run Sherlock with `python3 sherlock/sherlock.py ...`?zlThis is an outdated method. Please see https://sherlockproject.xyz/installation for up to date instructions.)ArgumentParserRawDescriptionHelpFormatter)loads) monotonic)Optional)FuturesSession) __longname__ __shortname__ __version__forge_api_latest_release) QueryStatus) QueryResult) QueryNotify)QueryNotifyPrint)SitesInformation)init)ArgumentTypeErrorc eZdZdfd ZxZS)SherlockFuturesSessioncf|i}tfd} t|dtr|djd|nDt|dtr't|d|d<|djd|n ||dg|d<t t|"||g|d|i|S#t $r |g|d<Y+wxYw)aRequest URL. This extends the FuturesSession request method to calculate a response time metric to each request. It is taken (almost) directly from the following Stack Overflow answer: https://github.com/ross/requests-futures#working-in-the-background Keyword Arguments: self -- This object. method -- String containing method desired for request. url -- String containing URL for request. hooks -- Dictionary containing hooks to execute after request finishes. args -- Arguments. kwargs -- Keyword arguments. Return Value: Request object. c*tz |_y)aResponse Time Hook. Keyword Arguments: resp -- Response object. args -- Arguments. kwargs -- Keyword arguments. Return Value: Nothing. N)relapsed)respargskwargsstarts A/var/www/betterdocs.net/sherlock_api/sherlock_project/sherlock.py response_timez5SherlockFuturesSession.request..response_timeKs%;.DL responserhooks) r isinstancelistinserttupleKeyErrorsuperrrequest) selfmethodurlr#rrr r __class__s @rr*zSherlockFuturesSession.request1s, =E  $ 0% +T2j!((M:E*-u5$(z):$;j!j!((M:&3E*4E$Fj! +T: C '+ $ /5   0!.E*  0sA-BB0/B0N)__name__ __module__ __qualname__r* __classcell__)r.s@rrr0s = = r!rcTd}d}d} |j}|jrd}|||fS#tjj$r}d}t |}Yd}~4d}~wtjj $r}d}t |}Yd}~fd}~wtjj$r}d}t |}Yd}~d}~wtjj$r} d}t | }Yd} ~ d} ~ wtjj$r} d}t | }Yd} ~ d} ~ wwxYw)NzGeneral Unknown Errorz HTTP Errorz Proxy ErrorzError Connectingz Timeout Errorz Unknown Error) result status_coderequests exceptions HTTPErrorstr ProxyErrorConnectionErrorTimeoutRequestException) request_future error_typesocial_networkr" error_contextexception_texterrherrperrcerrterrs r get_responserIqsH+MN"!((*    M" ]N 22!    ( (#$ T    ) )#% T    . .#* T    & &#' T    / /"' S"sE+D' A D': B  D', B>> D' C00 D' D""D'c 0t|tr|jd|St|tr.|j Dcic]\}}|t ||c}}St|t r|Dcgc]}t ||c}S|Scc}}wcc}w)Nz{})r$r:replacedictitemsinterpolate_stringr%) input_objectusernamekvis rrNrNs,$##D(33 L$ '?K?Q?Q?STtq!%a22TT L$ '9EFA"1h/FF UFs B 5Bc d|vS)znchecks if {?} exists in the username if exist it means that sherlock is looking for more multiple username{?})rPs rcheck_for_parameterrWs H r!)_-.cbg}tD]#}|j|jd|%|S)zFreplace the parameter with with symbols and return a list of usernamesrU) checksymbolsappendrK)rP allUsernamesrSs rmultiple_usernamesr_s7L 8H,,UA678 r!rP site_data query_notifytor unique_tor dump_responseproxytimeoutc  *|j||s|r2 ddlm}t dt d }  j} n(tj} tj} t|dk\rd} n t|} t| | } i} |jD]\}}d |jd i}d d i}d|vr|j!|dt#|d|j%dd}|jd}|rZt'j(||Dt+|||t,j.|d<d|d<d|d<d|d<|j!|dn||d<|jd}|jd}|jd}d}|V|dk(r | j}nD|dk(r | j0}n2|dk(r | j2}n |dk(r | j4}nt7d || t#||}||}n t#||}|!|d!d"k(r | j0}n | j}|d!d#k(rd$}nd%}|||d&}|||||||'}n ||||||(}||d)<|r| j9|| |<|jD]?\}}| j|}|jd}|jd}|=|d!}|d)}t;|||*\*}} *j<} *j@} *jDjG*jHxsd,}!t,jJ}"d}#gd-}$||}#nvtM*fd.|$Drt,jN}"nP|d/k(rqd%}%|jd0}&tQ|&tRr|&*jDvrd$}%n|&D]}'|'*jDvsd$}%n|%rt,jT}"nt,jV}"n|d"k(r|jd1}(t,jT}"tQ|(tXr|(g}(|(*j@|(vrt,jV}"n*j@d2k\s*j@d3krbt,jV}"nQ|d#k(r:d3*j@cxkrd2krnnt,jT}"n#t,jV}"nt[d4|d5|d6|rt d7t d8|t d9|t d:|t d;| t d<|d1t d= t d>*j@ t d?|d0t d@ t *jDt dAt dBtS|"zt d7t+||||"||#C})|j!|)|)|d<| |d<|!|d<|| |<B| S#t$rSt dt dt dt dt j |jY#wxYw#t$r2t dt j |jYCwxYw#t>$rd}YwxYw#tB$rd+} YwxYw#tB$rd}!YwwxYw#t\$rYwxYw#tB$rYwxYw#t\$rYwxYw#tB$rYwwxYw)Da'Run Sherlock Analysis. Checks for existence of username on various social media sites. Keyword Arguments: username -- String indicating username that report should be created against. site_data -- Dictionary containing all of the site data. query_notify -- Object with base type of QueryNotify(). This will be used to notify the caller about query results. tor -- Boolean indicating whether to use a tor circuit for the requests. unique_tor -- Boolean indicating whether to use a new tor circuit for each request. proxy -- String indicating the proxy URL timeout -- Time in seconds to wait before timing out request. Default is 60 seconds. Return Value: Dictionary containing results from report. Key of dictionary is the name of the social network site, and the value is another dictionary with the following keys: url_main: URL of main site. url_user: URL of user on site (if account exists). status: QueryResult() object indicating results of test for account existence. http_status: HTTP status code of query which checked for existence on site. response_text: Text that came back from request. May be None if there was an HTTP error when checking for existence. r) TorRequestz Important!z`> --tor and --unique-tor are now DEPRECATED, and may be removed in a future release of Sherlock.zz> If you've installed Sherlock via pip, you can include the optional dependency via `pip install 'sherlock-project[tor]'`.zn> Other packages should refer to their documentation, or install it separately with `pip install torrequest`. z2Tor not found in system path. Unable to continue. ) max_workerssessionurl_mainurlMainz User-AgentzFMozilla/5.0 (X11; Linux x86_64; rv:129.0) Gecko/20100101 Firefox/129.0headersr- z%20 regexCheckNstatusurl_user http_status response_texturlProberequest_methodrequest_payloadGETHEADPOSTPUTzUnsupported request_method for errorTyper6 response_urlFT)httphttps)r-rnproxiesallow_redirectsrfjson)r-rnrrfrr?)r?r@rA?zUTF-8)a:.loading-spinner{visibility:hidden}body.no-js .challenge-running{display:none}body.dark{background-color:#222;color:#d9d9d9}body.dark a{color:#fff}body.dark a:hover{color:#ee730a;text-decoration:underline}body.dark .lds-ring div{border-color:#999 transparent transparent}body.dark .font-red{color:#b20f03}body.darkz z#AwsWafIntegration.forceRefreshTokenzT{return l.onPageView}}),Object.defineProperty(r,"perimeterxIdentifiers",{enumerable:c3:K|]}|jvywr/)text).0hitMsgrs r zsherlock..s;f166!;smessageerrorMsg errorCodei,zUnknown Error Type 'z ' for site ''z+++++++++++++++++++++zTARGET NAME : zUSERNAME : zTARGET URL : zTEST METHOD : zSTATUS CODES : z Results...zRESPONSE CODE : zERROR TEXT : z>>>>> BEGIN RESPONSE TEXTz<<<<< END RESPONSE TEXTzVERDICT : )rP site_name site_url_userrq query_timecontext)/r torrequestrh ImportErrorprintsysexitfinishOSErrorrkr7RequestlenrrMgetupdaterNrKresearchrrILLEGALheadpostput RuntimeErrorreset_identityrIrAttributeErrorr6 ExceptionrencodeencodingUNKNOWNanyWAFr$r:CLAIMED AVAILABLEint ValueErrorr()+rPr`rarbrcrdrerfrhunderlying_requestunderlying_sessionrjrk results_totalrAnet_info results_siternr- regex_check url_proberwrxr*rrfuturerqr@ error_textrCr rtru query_statusrB WAFHitMsgs error_flagerrorserror error_codesr5rs+ @rsherlockrsTx  j , - l pq ,!+  077&--/%--/ 9~ )n %);G M%.OO$5o5 "HLL$;<  b   NN8I. /!%(2B2B32NOll<0 299[(;C%0.#{/B/B&L "(*L $*,L ',.L )    X 6 7(+L $ Z0I%\\*:;N&ll+<=OG)!U*%kkG#v-%llG#v-%llG#u,%kkG&)H'NOO*"4_h"O  /y(C K(M9&llG &kkG $6#(#' #(59 !##$3#( !!#$3#( *0H% &"113)5 n%_o5f%.OO$5]5 $((8 z*!!(+   k* *+(4!j) %:~  !IIM  --K FFMM!***?@M#**     !&M ; ; ;&??L 9 $J\\*-F &#&QVV#!&J$E%* *22 *44 = (",,{3K&..L+s+*m &1==K+G*44 #%)<*44 > ) amm)c)*22 *44 &zl2B>BRRST   ) * $^$45 6 $XJ/ 0 $SE* + $ZL1 2 (+)>(?@A ,  (89 (*)=(>?@ - . aff  + , $s<'88 9 ) *$$!   F#"( X'2 ]#(5 _%)5 n%{]5~ s  , ,  t u O P D E HH\((* +  , , G H HH\((* + ,H ! M !  K  M j          sW&Y; Z Z)Z'Z93[  [)[)&AYY7Z?Z ZZ Z$#Z$' Z65Z69 [[ [[ [&%[&) [65[6cDt|}|dkrtd|d|S)a_Check Timeout Argument. Checks timeout for validity. Keyword Arguments: value -- Time in seconds to wait before timing out request. Return Value: Floating point number representing the time (in seconds) that should be used for the timeout. NOTE: Will raise an exception if the timeout in invalid. rzInvalid timeout value: z$. Timeout must be a positive number.)floatr)value float_values r timeout_checkrs7,Ka%eW,P Q   r!c.tjdy)zwExit gracefully without throwing errors Source: https://www.devdungeon.com/content/python-catch-sigint-ctrl-c rN)rr)signal_receivedframes rhandlerr.s HHQKr!c tttdtd}|j ddt dtd|j d d d d d ddd|j dddd|j dddd|j ddd ddd|j dd d d!dd"|j d#d d$dd%|j d&d d'dd(|j d)d*d+d,gd-.|j d/d0d1d2d3dd45|j d6d d7dd8|j d9d:d;d|j d?d2d@dAt dBdCD|j dEd dFddG|j dHd dIdJdK|j dLd dMddN|j dOdPdQd2dRS|j dTdUd dVddW|j dXdYd ddZ[|j d\d dd][|j d^d d_dd`|j}tjtjt tjtj}t|}|da}|dbdtk7rt!dctdd|dbdde|df|j$r|j& t#dh|j&t!di|j&z|j$s |j(rt!djt!dk|j*rt-dJdln t-dJm|j.,|j0 t!dnt3j4db|j.8t7|j8dbk7r t!dot3j4db |j:rKt=t>j@jCt>j@jEtFdp}n|jH}|jHr|jHjKrq|jH}dq|} tj| j} t| } dr| vr$t!ds|dtt3j4db| dudv} dw| dx}t=|}|jLsjO|jPzD cic]} | jR| jT}} |jPgk(r|}ni}g}|jPD]U} d{}|D]1}| jW|jWk(s%||||<|dbz }3|d{k(sA|jYd|| d|W|rt!d}d~jC|d|st3j4dbt[d|j\|j^|j`}g}|j8D]@}tc|r"te|D]}|jY|0|jY|B|D]}tg||||j$|j(|jh|j&|jj}|j.r |j.}n`|j0rOt?jl|j0dJt>j@jC|j0|d}n|d}|jnstq|dd5}d{}|D]P}||}|jdjrttjvk(s5|dbz }|jy|ddezR|jyd|deddd|jzr9|d}|j0rKt?jl|j0dJt>j@jC|j0|}tq|ddd5}t{j||}|jgd|D]} |jr0|j^s$|| djrttjvk7r?|| dj}|d}|j|| || d|| dt|| djr|| d|g ddd|jrMg} g}!g}"g}#g}$g}%g}|D]} |jr0|j^s$|| djrttjvk7r@||jYdn!|jY|| dj| jY||!jY| |"jY|| d|#jY|| d|$jYt|| djr|%jY|| dtj| |!|"|#|$|%|d}&|&j|dddt!|jy#t"$r}t!dg|Yd}~d}~wwxYw#t"$r.}t!dy|t3j4dbYd}~d}~wwxYwcc} w#1swY,xYw#1swYxYw)Nz (Version ))formatter_class descriptionz --versionversionz vz-Display version information and dependencies.)actionrhelpz --verbosez-vz-dz--debug store_trueverboseFz0Display extra debugging information and metrics.)rdestdefaultrz--folderoutputz-fo folderoutputzTIf using multiple usernames, the output of the results will be saved to this folder.)rrz--outputz-ooutputzNIf using single username, the output of the result will be saved to this file.z--torz-trbz[Make requests over Tor; increases runtime; requires Tor to be installed and in system path.z --unique-torz-urczMake requests over Tor with new Tor circuit after each request; increases runtime; requires Tor to be installed and in system path.z--csvcsvz)Create Comma-Separated Values (CSV) File.z--xlsxxlsxzKCreate the standard file for the modern Microsoft Excel spreadsheet (xlsx).z--siter] SITE_NAME site_listz\Limit analysis to just the listed sites. Add multiple options to specify more than one site.)rmetavarrrrz--proxyz-p PROXY_URLstorerez8Make requests over a proxy. e.g. socks5://127.0.0.1:1080)rrrrrz--dump-responserdz8Dump the HTTP response to stdout for targeted debugging.z--jsonz-j JSON_FILE json_filez]Load data from a JSON file or an online, valid, JSON file. Upstream PR numbers also accepted.)rrrrz --timeoutTIMEOUTrf<z@Time (in seconds) to wait for response to requests (Default: 60))rrrtyperrz --print-all print_allz.Output sites where the username was not found.z --print-found print_foundTzEOutput sites where the username was found (also if exported as file).z --no-colorno_colorzDon't color terminal outputrP+ USERNAMESzrOne or more usernames to check with social networks. Check similar usernames using {?} (replace to '_', '-', '.').)nargsrrrz--browsez-bbrowsez)Browse to all results on default browser.z--localz-lz*Force the use of the local data.json file.)rrrz--nsfwz1Include checking of NSFW sites from default list.z--no-txtno_txtzDisable creation of a txt filetag_namerzUpdate available! z -->  html_urlz1A problem occurred while checking for an update: z-Tor and Proxy cannot be set at the same time.zUsing the proxy: zUsing Tor to make requestszyWarning: some websites might refuse connecting over Tor, so note that using this option might increase connection errors.)stripconvert) autoresetz+You can only use one of the output methods.z0You can only use --output with a single usernamezresources/data.jsonz=https://api.github.com/repos/sherlock-project/sherlock/pulls/rzERROR: Pull request #z not found.rshaz>++-"&..K!^_j^klH'/||H'='B'B$(23C(D%!$55 5k]+NO &7&?&FO+ghwgxy^*_&$%78E 99 dnn= >CCTTYY 0 00CMC ~~!   NN 1DG!. ! ::<=#6#6#88/<]/KIm,qLG !!|##avQK0 1  4TYY|5L4MQO P HHQK$T\\T^^DKKL MMM+ x (*84 +$$T* +   * + "t   ,,**LL   ;;++K    KK))D 9'',,t'8'8XJd:KLK%Jd+K{{k39 XT!"$+BL!(!6J!~~h/66+:M:MM&!+ :j#9D#@A B  CNCSSUVW X 88%Jd+K   D--= ggll4+<+Q>QQ &-dmH&=&H&HO&.*,OO$ #DM*5#DM*5 h 7 > >?#DM-8+ " F 99IEHHFK O A$$ NN h/66+:M:MM"*#**2.#**74=+B+M+MN  * T" j 9: j 9: c'$-"9"@"@AB""74=#?@# A& )! ( ($#.'6 I   (51he  T itjE K A%IJJKz   !  Dz X X"" " sWAi5Di+&j%9j* 3j*Cj7 i(i##i(+ j"4#jj"*j4 7k __main__)FFFNr)8__doc__rsherlock_project.__init__rrrrrrpandasrrrargparserrrrrtimertypingr r7requests_futures.sessionsr r r r rsherlock_project.resultrrsherlock_project.notifyrrsherlock_project.sitesrcoloramarrrrIrNrWr\r_r:rLboolrrrrr/r0rVr!rr=sI ?   @$40//43&> ^> B3<  hhhh  h  h  h C=hhV 2Wt  zFE IJ xy CHHQKsC 'C54C5