Modifying Maigret for OSINT | Threat Actor's Diary

Modifying Maigret for Username OSINT Search

by GhostExodus

4/25/24

Let’s talk about username search scripts for a moment. The first
question you’re probably wondering is which one is the best?
Well, in most cases, they are practically identical, with the only
difference being which sites are searched.

How these scripts work is simple. They try the username you’re
searching for against a list of sites, which adds the username to,
say, the members or users section of a website, as long as that site
doesn’t require members to login in order to fetch that information.
This is why there are so many false positives, and 404’s, where the
page cannot be found.

The good news is, that you can easily modify the list of sites these
Python scripts like Maigret and Sherlock use to find your targets.
This can allow you to sharpen your OSINT leverage to extend your
search even further.

To Download Maigret:
1. Git clone https://github.com/soxoj/maigret/blob/main/README.md
2. cd maigret
3. pip3 install -r requirements.txt
4. Python3 maigret usernametosearch

To modify the sites list:
1. Navigate to your Home folder
2. Open the maigret folder
3. Right-click on sites.md and open with mousepad, or any similar
text editor.

This is the sites list. Here’s a simple example:

1. ![](https://www.google.com/s2/favicons?domain=https://maps.google.com/) [Google
Maps (https://maps.google.com/)](https://maps.google.com/)*: top 1, maps, us*
1. ![](https://www.google.com/s2/favicons?domain=https://plus.google.com) [Google Plus
(archived) (https://plus.google.com)](https://plus.google.com)*: top 1*
1. ![](https://www.google.com/s2/favicons?domain=https://play.google.com/store)
[GooglePlayStore (https://play.google.com/store)](https://play.google.com/store)*: top
1, apps, us*
1. ![](https://www.google.com/s2/favicons?domain=https://www.youtube.com/) [YouTube
(https://www.youtube.com/)](https://www.youtube.com/)*: top 2, video*
1. ![](https://www.google.com/s2/favicons?domain=https://www.youtube.com/) [YouTube
User (https://www.youtube.com/)](https://www.youtube.com/)*: top 2, video*
1. ![](https://www.google.com/s2/favicons?domain=https://tieba.baidu.com) [Baidu
(https://tieba.baidu.com)](https://tieba.baidu.com)*: top 3, cn*
1. ![](https://www.google.com/s2/favicons?domain=https://amazon.com) [Amazon
(https://amazon.com)](https://amazon.com)*: top 50, us*

To add a custom URL, use any one of these as a template.

Copy one into your clipboard. For simplicity’s sake, paste it below the
original.

Let’s add Facebook to the sites list. The highlighted
portions show the modified portions I’ve added.
1. ![](https://www.google.com/s2/favicons?domain=https://www.facebook.com/) [Facebook
(https://www.facebook.com/)](https://www.facebook.com/)*: top 10, networking*

Save, and run in a terminal using:

python3 maigret.py username