Sherlock
Tool manual · Kali & common usage
OSINT · Beginner · OSINT lane
What is Sherlock?
Sherlock hunts usernames across many social sites.
Username OSINT on subjects you are legally allowed to investigate.
Official website: Sherlock · Documentation
When do you use it?
- You need Find public accounts across many sites for a username (authorized investigations only).
- You are following a CYNARKS lab or authorized engagement that calls for Sherlock.
- You already tried simpler checks and need this tool’s deeper capability.
When not to use it
- Do not stalk or harass; follow local law and platform ToS.
Who uses it?
- OSINT analysts
- Investigators (lawful use)
- Red teamers (authorized recon)
How do you use it? (typical flow)
- Install Sherlock using the steps below (prefer Kali package or official installer).
- Confirm you have authorization for the target (lab VM, own system, or written scope).
- Run --help / man (or the Help section) to see current flags for your version.
- Start with a safe example from Basic commands against localhost or an authorized lab target.
- Record what you ran, what you observed, and any follow-up (filter, report, remediation).
Help & manual (like man / --help)
Every serious tool has a built-in way to look up flags. Learn these first so you are not stuck memorizing every option.
1. Help
sherlock --help
2. Repo
https://github.com/sherlock-project/sherlock
Kali Linux
git clone / pip tools — popular alongside Kali OSINT metapackages.
1. Installation
| OS | Installation |
|---|---|
Kali Linux | git clone / pip tools — popular alongside Kali OSINT metapackages. |
pip | pip install sherlock-project |
2. Basic commands
1. Search username on supported sites
sherlock user123 --timeout 10
Search username on supported sites
2. Show help
sherlock --help
List flags for your installed version (same habit as man/--help).
3. Short help
sherlock -h
Alternate help flag when supported.
4. Limit to one site
--site
Limit to one site
5. Export results
--csv
Export results
Options / flags
| Option | Purpose |
|---|---|
--site | Limit to one site |
--csv | Export results |
5. Useful features
- Username coverage
- False positives
- Rate limits
6. Practical examples
Example 1: Search username on supported sites
sherlock user123 --timeout 10
Search username on supported sites
Example 2: Show help
sherlock --help
List flags for your installed version (same habit as man/--help).
Example 3: Short help
sherlock -h
Alternate help flag when supported.
Example 4: Limit to one site
--site
Limit to one site
Example 5: Export results
--csv
Export results
7. Important notes
- Use for fraud/impersonation investigations with policy approval — not for harassment.
- Authorized targets only — labs, systems you own, or written permission.
- Prefer reading --help / man / official docs for your installed version; flags change over time.
Related course: ethical hacking penetration testing · soc analyst blue team · Commands: /osint