🩻Username

How to gather more information about a username

Methodology

Content Analysis

Advanced Analysis

Social Networks
Search Engines
Domain name (<pseudo>.tld)
Email (<username>@<domain.name>)
- Mailcat
Extract Information by Forgotten Password
- Quidam
Use search function of social networks, users can sometimes change 1 character in their username (to be done slowly!)
Try identifying if username registered via login page
Verify all accounts belong to the target

Some tools can sometimes have false positive/negative I recommend testing with 2/3 tools and compare if you have the same results. Always verify identified account yourself

TODO => add (Censys, ZoomEye, Onyphe, Fofa, ...)

Useful

Dorking

intitle:<username>

inurl:<username>

<username> filetype:xls

<username> filetype:xlsx

<username> filetype:sql

Use Marple to automate google inurl search

Shodan

http.html:<username>

http.title:<username>

Netlas

http.title:<username>

http.body:<username>

http.meta:<username>

domain:<username>

Resources

Website

Tools

Username Searcher

Find Email Addresses

Extract Information by Forgotten Password

PreviousName NextEmail

Last updated 8 days ago