loading
loading
OSINT
Username search that collects accounts and profile data into one dossier.
overview
maigret takes one or more usernames, checks them against a large site database, and writes confirmed profile URLs plus page-extracted data into a single dossier folder.
Reach for it when a seed handle must become a map of online presence, including recursive pivots when a profile exposes another username or ID. Prefer sherlock for a faster yes/no on where a handle exists.
Trickest provides maigret as a managed OSINT node. Feed usernames; scope with --site, --tags, or --top-sites; take CSV, PDF, HTML, JSON, XMind, or graph reports for analysts and downstream nodes.
source github.com/soxoj/maigret
use cases
Search one handle across thousands of sites to find every account tied to it, then read the collected profile data as one consolidated report.
Let recursive search extract usernames and IDs from found profiles and search on them too, turning one seed handle into a connected identity graph.
Restrict the scan with tags, a named site list, or the top-ranked sites so an investigation only checks the services that matter and finishes faster.
Emit PDF, HTML, CSV, JSON, XMind, and graph reports from the same run so the output feeds both downstream automation and a human review.
reference
| Name | Type | Flag | Description |
|---|---|---|---|
| usernames | STRING | · | One or more usernames to search by (separated by spaces). |
| site | STRING | --site | Limit analysis to only the specified sites. |
| tags | STRING | --tags | Restrict the scan to sites carrying the given tags. |
| top-sites | STRING | --top-sites | Count of sites for scan ranked by Alexa Top (default: 500). |
| json | STRING | --json | Generate a JSON report of a specific type: simple or ndjson. |
| BOOLEAN | Generate a PDF report covering all usernames. | ||
| timeout | STRING | --timeout | Seconds to wait for each response (default 30); higher catches slow sites. |
| max-connections | STRING | --max-connections | Allowed number of concurrent connections (default 100). |
Showing key inputs. maigret exposes 38 inputs in total.
| Name | Type | Flag | Description |
|---|---|---|---|
| usernames | STRING | · | One or more usernames to search by (separated by spaces). |
| db | FILE | --db | Load Maigret database from a JSON file or HTTP web resource. |
| site | STRING | --site | Limit analysis to only the specified sites. |
| tags | STRING | --tags | Specify tags of sites (see --stats). |
| top-sites | STRING | --top-sites | Count of sites for scan ranked by Alexa Top (default: 500). |
| all-sites | BOOLEAN | --all-sites | Use all sites for scan. |
| use-disabled-sites | BOOLEAN | --use-disabled-sites | Use disabled sites to search (may cause many false positives). |
| id-type | STRING | --id-type | Specify identifier(s) type (default: username). |
| ignore-ids | STRING | --ignore-ids | Identifiers to exclude from the search. |
| parse | STRING | --parse | Parse page by URL and extract username and IDs to use for search. |
| submit | STRING | --submit | URL of an existing profile on a new site to submit. |
| no-recursion | BOOLEAN | --no-recursion | Disable recursive search by additional data extracted from pages. |
| no-extracting | BOOLEAN | --no-extracting | Disable parsing pages for additional data and other usernames. |
| with-domains | BOOLEAN | --with-domains | Enable the experimental feature of checking domains built from usernames. |
| self-check | BOOLEAN | --self-check | Do a self check for sites and database and disable non-working ones. |
| stats | BOOLEAN | --stats | Show database statistics (most frequent site engines and tags). |
| csv | BOOLEAN | --csv | Create a CSV report (one report per username). |
| BOOLEAN | Generate a PDF report (general report on all usernames). | ||
| txt | BOOLEAN | --txt | Create a TXT report (one report per username). |
| html | BOOLEAN | --html | Create an HTML report file (general report on all usernames). |
| json | STRING | --json | Generate a JSON report of specific type: simple, ndjson (one report per username). |
| xmind | BOOLEAN | --xmind | Generate an XMind 8 mindmap report (one report per username). |
| graph | BOOLEAN | --graph | Generate a graph report (general report on all usernames). |
| reports-sorting | STRING | --reports-sorting | Method of results sorting in reports (default: in order of getting the result). |
| timeout | STRING | --timeout | Time in seconds to wait for a response to requests (default 30s). A longer timeout is more likely to get results from slow sites, but may add a long delay to gather all results. |
| retries | STRING | --retries | Attempts to restart temporarily failed requests. |
| max-connections | STRING | --max-connections | Allowed number of concurrent connections (default 100). |
| proxy | STRING | --proxy | Make requests over a proxy, e.g. socks5://127.0.0.1:1080. |
| tor-proxy | STRING | --tor-proxy | Specify the URL of your Tor gateway. Default is socks5://127.0.0.1:9050. |
| i2p-proxy | STRING | --i2p-proxy | Specify the URL of your I2P gateway. Default is http://127.0.0.1:4444. |
| cookies-jar-file | FILE | --cookies-jar-file | File with cookies. |
| info | BOOLEAN | --info | Display extra service information and metrics. |
| verbose | BOOLEAN | --verbose | Display extra information and metrics. |
| debug | BOOLEAN | --debug | Display extra service and debug information and metrics, and save responses in debug.log. |
| print-not-found | BOOLEAN | --print-not-found | Print sites where the username was not found. |
| print-errors | BOOLEAN | --print-errors | Print error messages: connection, captcha, site country ban, etc. |
| no-progressbar | BOOLEAN | --no-progressbar | Do not show the progress bar. |
| no-color | BOOLEAN | --no-color | Do not color terminal output. |
example
# search a username across top-ranked sites, emit PDF + HTML reportsmaigret l.fenwick --top-sites 500 --pdf --html --timeout 30 --max-connections 50[*] Checking username l.fenwick on 1500 sites[+] GitHub: https://github.com/l.fenwick[+] GitLab: https://gitlab.com/l.fenwick[+] Reddit: https://www.reddit.com/user/l.fenwick[+] Instagram: https://www.instagram.com/l.fenwick[+] Twitter: https://twitter.com/l.fenwick[*] Extracted: fullname, location, created_at[*] Recursive search: 2 new usernames queued[*] 6 accounts found across 1500 sites, report saved to report_l.fenwick.pdfguidance
Use maigret when you hold a username and need a full dossier of confirmed accounts plus extracted profile data, with optional recursive pivots. Prefer sherlock for a quick existence check. Prefer socialscan for email or username availability.
Enumerates where a username exists. maigret adds recursive pivots and richer per-profile extraction.
Reports whether an email or username is available, taken, or invalid. Different question from dossier building.
Gathers email-account intel such as IP and host. Complementary OSINT axis to username search.
faq
related
Passive DNS records from DNSDumpster.
Generate lookalike domains and flag registered typosquats.
Look up the real IP of a host from its favicon via Shodan.
Email OSINT from public sources, with optional breach checks.
Check whether emails and usernames are available, taken, or invalid.
Passive DNSDumpster host lookup by domain.
A username feeds maigret, which searches thousands of sites and writes the collected dossier as a queryable output.
Facts on this page come from the live Trickest tool library.