OSINT
Collect every account tied to a username
maigret is an OSINT dossier tool that collects a dossier on a person by username only, checking that username for accounts on a huge number of sites and gathering all the available information from the discovered pages, without requiring API keys.
installpip install maigret
Python · MIT license
overview
What maigret does
maigret takes one or more usernames, checks them against a large site database, and writes confirmed profile URLs plus page-extracted data into a single dossier folder.
Reach for it when a seed handle must become a map of online presence, including recursive pivots when a profile exposes another username or ID. Prefer sherlock for a faster yes/no on where a handle exists.
Trickest provides maigret as a managed OSINT node. Feed usernames; scope with --site, --tags, or --top-sites; take CSV, PDF, HTML, JSON, XMind, or graph reports for analysts and downstream nodes.
source github.com/soxoj/maigret
use cases
Where maigret fits
Build a dossier from a single username
Search one handle across thousands of sites to find every account tied to it, then read the collected profile data as one consolidated report.
Pivot across linked identities
Let recursive search extract usernames and IDs from found profiles and search on them too, turning one seed handle into a connected identity graph.
Scope a run to relevant sites
Restrict the scan with tags, a named site list, or the top-ranked sites so an investigation only checks the services that matter and finishes faster.
Produce analyst-ready reports
Emit PDF, HTML, CSV, JSON, XMind, and graph reports from the same run so the output feeds both downstream automation and a human review.
reference
maigret inputs and flags
| Name | Type | Flag | Description |
|---|---|---|---|
| usernames | STRING | · | One or more usernames to search by (separated by spaces). |
| site | STRING | --site | Limit analysis to only the specified sites. |
| tags | STRING | --tags | Restrict the scan to sites carrying the given tags. |
| top-sites | STRING | --top-sites | Count of sites for scan ranked by Alexa Top (default: 500). |
| json | STRING | --json | Generate a JSON report of a specific type: simple or ndjson. |
| BOOLEAN | Generate a PDF report covering all usernames. | ||
| timeout | STRING | --timeout | Seconds to wait for each response (default 30); higher catches slow sites. |
| max-connections | STRING | --max-connections | Allowed number of concurrent connections (default 100). |
Showing key inputs. maigret exposes 38 inputs in total.
Full flag reference (38 inputs)
| Name | Type | Flag | Description |
|---|---|---|---|
| usernames | STRING | · | One or more usernames to search by (separated by spaces). |
| db | FILE | --db | Load Maigret database from a JSON file or HTTP web resource. |
| site | STRING | --site | Limit analysis to only the specified sites. |
| tags | STRING | --tags | Specify tags of sites (see --stats). |
| top-sites | STRING | --top-sites | Count of sites for scan ranked by Alexa Top (default: 500). |
| all-sites | BOOLEAN | --all-sites | Use all sites for scan. |
| use-disabled-sites | BOOLEAN | --use-disabled-sites | Use disabled sites to search (may cause many false positives). |
| id-type | STRING | --id-type | Specify identifier(s) type (default: username). |
| ignore-ids | STRING | --ignore-ids | Identifiers to exclude from the search. |
| parse | STRING | --parse | Parse page by URL and extract username and IDs to use for search. |
| submit | STRING | --submit | URL of an existing profile on a new site to submit. |
| no-recursion | BOOLEAN | --no-recursion | Disable recursive search by additional data extracted from pages. |
| no-extracting | BOOLEAN | --no-extracting | Disable parsing pages for additional data and other usernames. |
| with-domains | BOOLEAN | --with-domains | Enable the experimental feature of checking domains built from usernames. |
| self-check | BOOLEAN | --self-check | Do a self check for sites and database and disable non-working ones. |
| stats | BOOLEAN | --stats | Show database statistics (most frequent site engines and tags). |
| csv | BOOLEAN | --csv | Create a CSV report (one report per username). |
| BOOLEAN | Generate a PDF report (general report on all usernames). | ||
| txt | BOOLEAN | --txt | Create a TXT report (one report per username). |
| html | BOOLEAN | --html | Create an HTML report file (general report on all usernames). |
| json | STRING | --json | Generate a JSON report of specific type: simple, ndjson (one report per username). |
| xmind | BOOLEAN | --xmind | Generate an XMind 8 mindmap report (one report per username). |
| graph | BOOLEAN | --graph | Generate a graph report (general report on all usernames). |
| reports-sorting | STRING | --reports-sorting | Method of results sorting in reports (default: in order of getting the result). |
| timeout | STRING | --timeout | Time in seconds to wait for a response to requests (default 30s). A longer timeout is more likely to get results from slow sites, but may add a long delay to gather all results. |
| retries | STRING | --retries | Attempts to restart temporarily failed requests. |
| max-connections | STRING | --max-connections | Allowed number of concurrent connections (default 100). |
| proxy | STRING | --proxy | Make requests over a proxy, e.g. socks5://127.0.0.1:1080. |
| tor-proxy | STRING | --tor-proxy | Specify the URL of your Tor gateway. Default is socks5://127.0.0.1:9050. |
| i2p-proxy | STRING | --i2p-proxy | Specify the URL of your I2P gateway. Default is http://127.0.0.1:4444. |
| cookies-jar-file | FILE | --cookies-jar-file | File with cookies. |
| info | BOOLEAN | --info | Display extra service information and metrics. |
| verbose | BOOLEAN | --verbose | Display extra information and metrics. |
| debug | BOOLEAN | --debug | Display extra service and debug information and metrics, and save responses in debug.log. |
| print-not-found | BOOLEAN | --print-not-found | Print sites where the username was not found. |
| print-errors | BOOLEAN | --print-errors | Print error messages: connection, captcha, site country ban, etc. |
| no-progressbar | BOOLEAN | --no-progressbar | Do not show the progress bar. |
| no-color | BOOLEAN | --no-color | Do not color terminal output. |
example
Run maigret
# search a username across top-ranked sites, emit PDF + HTML reports
maigret l.fenwick --top-sites 500 --pdf --html --timeout 30 --max-connections 50[*] Checking username l.fenwick on 1500 sites
[+] GitHub: https://github.com/l.fenwick
[+] GitLab: https://gitlab.com/l.fenwick
[+] Reddit: https://www.reddit.com/user/l.fenwick
[+] Instagram: https://www.instagram.com/l.fenwick
[+] Twitter: https://twitter.com/l.fenwick
[*] Extracted: fullname, location, created_at
[*] Recursive search: 2 new usernames queued
[*] 6 accounts found across 1500 sites, report saved to report_l.fenwick.pdfguidance
Choosing maigret
Use maigret when you hold a username and need a full dossier of confirmed accounts plus extracted profile data, with optional recursive pivots. Prefer sherlock for a quick existence check. Prefer socialscan for email or username availability.
sherlock
Enumerates where a username exists. maigret adds recursive pivots and richer per-profile extraction.
socialscan
Reports whether an email or username is available, taken, or invalid. Different question from dossier building.
infoga
Gathers email-account intel such as IP and host. Complementary OSINT axis to username search.
faq
maigret questions
related
More OSINT tools
dnsdumpster-dns-lookup
Passive DNS records from DNSDumpster.
dnstwist
Generate lookalike domains and flag registered typosquats.
favup
Look up the real IP of a host from its favicon via Shodan.
Infoga
Email OSINT from public sources, with optional breach checks.
socialscan
Check whether emails and usernames are available, taken, or invalid.
dnsdumpster-host-search
Passive DNSDumpster host lookup by domain.
Run maigret yourself
A username feeds maigret, which searches thousands of sites and writes the collected dossier as a queryable output.
Facts on this page come from the live Trickest tool library.