Instructor: Have you managed to download
the Sherlock tool?
If you did, congrats.
If not, let's see how we can get it
and what we can do with it.
So if you haven't already
open up your Firefox and type Sherlock GitHub.
The first link should be on the original link
of the tool that should lead you to this GitHub page.
Once you're on the Sherlock page
you should see all of the files that belong to this tool.
Down here we will see the installation
so how we can install the tool.
And right here we will also see the usage.
But before we check how the usage of the tool
let us go and download Sherlock first.
So we already know how we can do that.
Just copy the link to this tool, open up your terminal
and type git clone, and then paste the link of the tool.
Press enter
and this should automatically download the tool for us.
We can see this tool is a lot larger than the redhawk
since it took a little bit more time to download.
And once it finishes downloading, we should type LS
and we will see the Sherlock folder inside
of our desktop directory.
Let us navigate to that folder, and if I type LS in it
we should see all of these files
that we saw on this page right here.
Good.
Let us close this.
We are not going to be checking anything
on this page anymore.
And outside of all of these files
we want to go to this Sherlock folder.
So if we go cd, Sherlock, and type Ls right here.
Here is the tool.
It is a Python tool, and we know
that this is the tool since it is named sherlock.py.
All these other Python files are simply just
the additional files for this tool that is probably
getting imported inside of this.
So, to run this
we can type the command Python3 and then Sherlock.
Hmm, no module named or request.
So this could either mean one of two things.
This tool is supposed to be ran with Python tool
or this module does not exist for Python three.
And if you get an error that some module doesn't exist
what you want to do is you want to type pip3 install
and then the name of the module.
So I can just copy this
copy selection and paste it right here.
Let's see whether we can download this module.
And it seems that the requirement has
already been satisfied.
So could be that we're missing this module for Python too.
Let's try first to run it once again
after running this command.
So this command actually did something, as it says
it performed building of wheels for collected packages
and it managed to resolve our problem.
So now we can run the tool.
It does give us an error right here
but this is just a syntax error that tells us
that some arguments are required such as usernames.
So let me just clear the screen
and type python3 sherlock.py once again.
And here are all
of the available options that we can use with Sherlock.
But the basic usage
of this tool is specifying python3 sherlock.py
And then after it comes a username, what this tool will do
with that username is it is going to search
through bunch of different platforms for the same username.
So if you, for example, had a username that you discovered
for some domain or for some company and you want to discover
whether that person has some other accounts
with the same username, you can throw it
in this tool and it'll find you all
of the other accounts that have that same username.
What are we going to use here?
Do you remember Our Harvester tool?
It didn't work once we tried it out
but what I did few minutes ago is I ran the command
on the same domain that didn't work previously
Once we tried it before.
I also put the source to be Twitter.
So it managed to find 10 users that have Twitter
and these users are discovered from this domain.
If I go and copy any one of them
and, let's go with key frames
and throw it in this tool
I should be able to discover other accounts
that have this same username.
So, here we already got this one.
And by the way, this is not really a unique username.
So it might be that this account, for example
doesn't belong to the same person.
But if you were to find a unique username such as
for example, maybe this one or this one
or even this one and throw it inside
of this tool and you manage to discover some other accounts.
Those accounts will probably belong to that person.
But if the username was something like media
and we put media inside of the Sherlock tool
well then most likely all
of those accounts will not belong to the same person.
Okay, so here is our output and it managed to discover
a bunch of other accounts that also have the same username.
So let's try with another username.
If I go all the way down and Control+C this then
clear the screen
and let's pick for example, this username copy it
and I threw it inside of this tool once again
let us see whether we manage to
find another platform that has this same account.
So it seems that most of them are giving us not found.
Let's wait for final results, and here they are.
So we already get the output for Wikipedia.
We got our username that we discovered
from the Twitter profile.
If I go all the way up, let's see whether we manage to
find something else.
And it seems that all of the others have not found.
And here is also a cash.me profile with the same username.
So that is another result that we manage to gather.
Okay, great.
So that would basically be it for this tool.
Now another thing that this tool does is it also
saves our results in a file.
So if I go and Control+C this, clear the screen and type Ls
oh, nevermind, it seems that it didn't save it.
Maybe if we specified an option.
For it to save, let us run the help menu.
No such far directory.
Yeah, that's because we are in wrong folders.
So let me go to the Sherlock folder
and run the Python3 sherlock.py -- help.
And yeah
we actually probably had to run this output command.
And after the output we specify the file name
and the output of the result will be saved to this file.
So it doesn't save it by default.
And you can also check out other options as well.
But the purpose of this in previous video was to figure
out how we can download additional tools.
You might never use this tool again
or you might use it every time.
It depends on which type of penetration test you perform
and what kind of strategy you plan for your attacks.
But it is always good to have a bunch
of different tools and options that you can use.
Now that we know how we can download tools from GitHub
every time a certain tool breaks
or you don't get the desired result
with some tool, you can go to GitHub and try to
find a similar tool that will give you bad results.
Okay, good.
So in the next video
I will give you a bonus tool that I created
in Python3 that will be able to gather much more emails
than the already built in tools in Cal Linux.