userrecon-py：在187个社交网络中查找用户名

发表于 2019年07月20日
安全工具

目录表

userrecon-py

一个在187个社交网络中查找用户名的脚本，归类于社会工程学。用于渗透测试或信息安全加固中的信息收集。

userrecon-py安装与使用

安装

安装依赖 (Debian/Ubuntu):

sudo apt install python3 python3-pip

使用pip3安装

sudo -H pip3 install git+https://github.com/decoxviii/userrecon-py.git
userrecon-py --help

使用

首先运行userrecon-py --help打印可用的操作。然后，您可以执行以下测试：

userrecon-py --target decoxviii -o test_one

包含的187个社交网络清单

https://raw.githubusercontent.com
http://creativecommons.org
https://500px.com
https://9gag.com
https://about.me
https://angel.co
http://www.anobii.com
https://appearoo.com
http://ask.fm
http://www.authorstream.com
http://badoo.com
https://bandcamp.com
https://launchpad.37signals.com
https://www.behance.net
https://bitbucket.org
https://bitbucket.org
http://blip.fm
http://blogmarks.net
http://api.bodybuilding.com
http://bodyspace.bodybuilding.com
https://bugcrowd.com
https://www.buzzfeed.com
https://www.buzznet.com
https://www.canva.com
https://cash.me
http://www.cardomain.com
http://profile.cheezburger.com
https://discuss.codecademy.com
https://www.codementor.io
http://www.colourlovers.com
http://www.cruisemates.com
http://www.dailymotion.com
http://del.icio.us
https://devrant.com
https://www.diigo.com
https://discuss.elastic.co
https://disqus.com
https://diy.org
https://dribbble.com
https://www.duby.co
http://www.ebay.com
http://eightbit.me
https://www.engadget.com
http://www.eporner.com
https://www.etsy.com
https://www.facebook.com
http://www.fanpop.com
https://www.fiverr.com
https://www.flickr.com
https://flipboard.com
https://foursquare.com
https://www.freelancer.com
http://www.freesound.org
https://friendfinder.com
https://www.friendfinder-x.com
https://www.furaffinity.net
https://www.funnyordie.com
https://www.gamespot.com
https://connect.garmin.com
http://www.geekgrade.com
https://www.geocaching.com
https://giphy.com
https://api.github.com
https://github.com
https://gitlab.com
https://www.goodreads.com
https://www.gpsies.com
http://en.gravatar.com
http://en.gravatar.com
https://news.ycombinator.com
https://hackerone.com
https://haveibeenpwned.com
http://hubpages.com
http://www.i-am-pregnant.com
https://ifttt.com
https://www.ign.com
https://imageshack.com
http://imgur.com
https://www.instagram.com
http://www.instructables.com
http://archive.org
https://www.interpals.net
https://keybase.io
https://kik.me
http://profilepics.cf.kik.com
https://www.kiwibox.com
http://klear.com
http://www.kongregate.com
http://www.last.fm
http://www.librarything.com
http://new.livejasmin.com
http://marketingland.com
https://api.massroots.com
https://massroots.com
https://medium.com
https://medium.com
https://www.meetme.com
http://www.meetzur.com
https://social.technet.microsoft.com
https://namemc.com
https://www.mix.com
https://www.mixcloud.com
https://mixer.com
http://api.mixlr.com
http://mixlr.com
http://www.moddb.com
http://muckrack.com
https://www.myanimelist.net
http://www.mybuilder.com
http://www.myfitnesspal.com
http://www.mylot.com
https://myspace.com
https://www.netvibes.com
https://newproject2.com
https://onlyfans.com
https://www.openstreetmap.org
http://pastebin.com
https://www.patreon.com
https://www.periscope.tv
https://www.photoblog.com
http://smg.photobucket.com
http://picturetrail.com
http://www.pinkbike.com
https://www.pinterest.com
http://playlists.net
http://www.plurk.com
https://www.porn.com
https://www.pornhub.com
https://www.producthunt.com
https://psnprofiles.com
https://www.reddit.com
http://www.redtube.com
https://repl.it
https://www.rottentomatoes.com
https://scratch.mit.edu
https://scratch.mit.edu
https://www.seoclerks.com
http://www.setlist.fm
https://www.trip.skyscanner.com
http://www.slideshare.net
http://smashrun.com
http://smite.guru
https://www.smule.com
http://www.snooth.com
https://soundcloud.com
https://sourceforge.net
https://speakerdeck.com
https://www.sporcle.com
https://open.spotify.com
http://steamcommunity.com
https://archive.storycorps.org
http://stunited.org
https://www.taringa.net
https://t.me
http://www.tf2items.com
https://www.theguardian.com
https://www.gotinder.com
https://www.tripadvisor.com
https://www.tripit.com
https://passport.twitch.tv
https://twitter.com
https://www.udemy.com
https://untappd.com
http://www.ustream.tv
http://vampirefreaks.com
http://www.viddler.com
http://vimeo.com
https://vine.co
https://www.vivino.com
https://vk.com
https://voat.co
https://www.voices.com
https://wanelo.com
https://www.wattpad.com
https://weheartit.com
http://www.wishlistr.com
https://en.wikipedia.org
https://profiles.wordpress.org
https://wordpress.org
https://www.xboxgamertag.com
https://xhamster.com
https://www.xvideos.com
https://www.youtube.com
https://www.xing.com
https://www.zomato.com
https://api.zooppa.com
http://community.zooppa.com

项目灵感源于

点评

涉及的社交网络站点主要是国际站，国内的同学要使用只需根据规则添加就行：

{
 "name" : "500px",
 "check_uri" : "https://site.com/{account}",
 "account_existence_code" : "200",
 "account_existence_string" : "<div class=\"user_avatar__avatar_wrapper\">",
 "account_missing_string" : "Oops! This page doesn’t exist.",
 "account_missing_code" : "404",
 "known_accounts" : ["alice","bob"],
 "category" : "images",
 "valid" : true
},