Add: Sherlock — Username OSINT across 69 platforms

[sinXne0]

Summary

• Adds Sherlock, a username OSINT payload that searches 69 platforms for a given username
• Results stream live to the pager screen as each platform is checked (green [+] FOUND lines)
• All findings saved to /root/loot/sherlock/<username>_<timestamp>.txt
• Fully sequential execution — no background jobs, no wait conflicts with the pager's spinner system

Platforms

Social media, gaming, dev/tech, music, forums, security, and messaging — Twitter/X, Instagram, TikTok, GitHub, Steam, HackTheBox, TryHackMe, Telegram, and 61 more.

Category

library/user/reconnaissance/sherlock/

Test plan

• Deploy to pager: scp -r sherlock/ root@<pager-ip>:/root/payloads/user/reconnaissance/
• Run with a known username — confirm [+] FOUND lines appear on screen in real time
• Run with an unknown username — confirm "No accounts found" alert
• Verify loot file created at /root/loot/sherlock/
• Confirm payload exits cleanly after alert is dismissed

Author

sinXneo

🤖 Generated with Claude Code

[curthayman]

Very similar to @Hackazillarex payload - https://github.com/hak5/wifipineapplepager-payloads/tree/master/library/user/reconnaissance/OSINT-U-Asked

[hak5peaks]

I highly recommend adding a simple internet connection test before iterating through the list of sites. This will prevent people from attempting to run the payload without having internet access. Without this check the payload will just time out on every URL.

if ! curl -s --connect-timeout 3 --max-time 5 https://1.1.1.1 >/dev/null; then
    ERROR_DIALOG "No internet connectivity."
    exit 1
fi