Sherlock

0.16.2

Hunt down social media accounts by username across social networks.

Verified 24 Sept 2026
pip 0.16.2
MIT
93k stars

Source on GitHub · PyPI release · Markdown

Install and run

otlite install sherlock
Installs sherlock-project==0.16.2 into its own virtualenv. otlite lists what it will install and asks before it starts.
otlite run sherlock -- u:johndoe
sherlock receives sherlock johndoe

No otlite yet? Install it in one line

curl -fsSL https://get.otinstaller.com/otlite | sh

Linux and macOS, no Docker. It uses your Python and pipx when both are there, and otherwise brings its own Python. About otlite · otlite docs

What it takes

Typed inputs after -- become Sherlock's own arguments. Anything else after -- passes through unchanged, so every option of the tool still works.

Input	With otlite	`sherlock` receives
Username`u:`	`otlite run sherlock -- u:johndoe`	`sherlock johndoe`

What a run leaves

Every run is saved under results/ where you run otlite (or --output, or OTLITE_RESULTS_DIR): what the tool printed, a sidecar with how it ran, and an envelope.

results/sherlock/johndoe/<time>_sherlock_johndoe_<run id>.txt
results/sherlock/johndoe/<time>_sherlock_johndoe_<run id>.meta.json
results/sherlock/johndoe/<time>_sherlock_johndoe_<run id>.envelope.json

{
  "envelope": 1,
  "tool": "sherlock@0.16.2",
  "runtime": "otlite",
  "input": { "target": "johndoe" },
  "case": null,
  "started_at": "…", "ended_at": "…", "duration_ms": …,
  "exit_code": 0,
  "status": "complete",
  "entities": [{ "type": "url", "value": "…" }, …],
  "warnings": [],
  "output": { "path": "results/sherlock/johndoe/<time>_sherlock_johndoe_<run id>.txt", "sha256": "…", "bytes": … }
}

The envelope's shape, the same for every tool; values elided. Its entities are the emails, domains, IP addresses and URLs found in the output, or the tool's own when it prints them.

otlite results --tool sherlock

otlite extract sherlock

otlite diff sherlock johndoe

List the saved runs, pull out every indicator, or compare the two latest runs against the same target.

With other tools

These run it with every other installed tool that takes the same input, a few at a time, and save each run:

otlite run --all u:johndoe

otlite auto johndoe

It is in the username-investigation playbook:

otlite playbook username-investigation johndoe

Also on the OTInstaller registry

Prefer a sandbox? osintverse-community/sherlock runs Sherlock with ot: pinned and scanned, in a locked-down container with no access to your files and no network unless it needs one. Linux, macOS and Windows, with Docker or Podman.

ot install osintverse-community/sherlock

Related tools

All 47 tools →