Dual-mode OSINT — hunt usernames across 3,300+ networks and emails across 120+ platforms simultaneously

---

Download

Platform	Download	Notes
🤖 Android		Recommended for Android mobile users
🪟 Windows		Automated standalone setup installer with desktop shortcut integration
🐧 Linux (Debian/Ubuntu)		Desktop package tailored for Ubuntu, Debian, Linux Mint & Pop!_OS
🎩 Linux (Fedora/RHEL)		Desktop package tailored for Fedora, openSUSE, RHEL & CentOS
📦 Linux (Universal Portable)		Universal standalone portable archive for Arch, Alpine, Steam Deck & all distros

Android Architecture Build Splits

Variant	Download	Notes
📱 ARM64 (most phones)	sherlock-arm64-v8a.apk	Modern 64-bit Android devices
💻 x86_64 (emulators)	sherlock-x86_64.apk	Chromebooks & Android emulators

---

Core Capabilities

Capability	Description
3,300+ Username Networks	Username OSINT via the Maigret engine — GitHub, Instagram, Discord, Telegram, SoundCloud, and thousands more across international, regional, and specialized networks. Recursive search expands from discovered IDs.
120+ Email Platforms	Email OSINT via holehe — register/login/recovery checks with masked recovery email + phone hints, method badges, and honest Unavailable/Rate-Limited separation.
Stealth TLS Email Checks	curl-cffi Chrome 124 JA3/TLS fingerprinting bypasses WAF 403 blocks during email scans.
Profile Enrichment	socid-extractor (164 schemes) — avatar, bio, followers, location, company, verified, personal links. Basic (fast) / Full (API mutations) modes.
Intelligence Dossiers	Gold PDF Dossier, XMind Mind Map (.xmind), Identity Network Analysis, JSON, CSV, and TXT exports — all generated on-device.
6-Layer On-Device Cache	Compiled database pickle (2.88× faster cold start), avatar images, report fingerprints, geo lookups, inverted tag indices, and TTL DNS cache.
Fast Offline Scans	Local-first database — scan instantly without an initial download.
Selective Target Scope	Scan depth (All 3,300+ / Top 1,000 / Top 500), custom manifest support, and per-category network browsing.
History + Typeahead	Local search history with Dismissible swipe-to-delete and SearchBar typeahead suggestions.

---

Screenshots

Username search across 3,300+ social networks with quick scan options.	Email lookup across 120+ platforms with password recovery checks.

Live results stream with PDF, XMind, CSV, JSON, and TXT export.	Enriched profile dossier with bio, follower count, and links.

Email dossier with account status and leaked recovery hints.	Search history with past results and quick re-run.

Settings for theme, scan options, and request timeouts.	Live activity terminal showing real-time network logs.

---

Features

• Gold-Branded Design System — Solarized Light (Pure White) and Monokai themes aligned to the bronze-gold detective logo. ScrollbarTheme / ChipTheme / TabBarTheme / CardTheme / PageTransitionsTheme unified in AppTheme.
• Dual-Mode OSINT — Username (Maigret, 3,300+ networks) + Email (holehe) with material SegmentedButton pill and type-ahead SearchBar.
• Profile Enrichment — socid-extractor post-scan enrichment: avatar guard (https only), bio, followers, location, company, verified badge, personal link — Basic/Full modes via mutate_url API schemes.
• Live Text-Search Filters — Instantly filter thousands of results as the scanner runs. ListView(build_controls_on_demand=True) virtualization + SelectionArea long-press. Results sort A–Z by platform.
• Tap-to-Open + Share + Haptic — Tap result → browser; copy/share via Clipboard + Share; HapticFeedback on search/copy/share.
• Network & Proxy — Maigret proxy support via Settings → Network & Proxy (socks5:// / http://).
• Email Concurrency + Filters — Slider 4–30, Found-Only toggle, method filter (All / Register / Login / Recovery).
• History — Dismissible swipe-to-delete rows, Banner offline strip, SearchBar history typeahead, type-ahead Chip filters.
• Interstitial Ads — Shown on every search with background preload rotation; UMP consent form appears automatically in regions that require it.
• Custom Database Manifest — Point the scanner at your own site-database JSON (via Settings) for specialized investigations.
• Markdown Release Notes — UpdateDialog renders rich Markdown(GITHUB_WEB) changelogs with tappable links.
• Export BottomSheet — Material 3 BottomSheet (drag handle, scrollable ListTile per format) replaces AlertDialog.
• Debounced Storage Writes — Prevents disk I/O bottlenecks and race conditions when modifying search parameters.
• Ruff Compliance — Clean, formatted, and strictly linted Python codebase.

---

Architecture

Layer	Technology	Purpose
Frontend	Flet 0.86.5 (Flutter 3.44) on Python 3.14	Cross-platform UI — SegmentedButton, Chip, Banner, BottomSheet, Dismissible, Markdown + services (HapticFeedback, Share, Connectivity)
Scan Core	maigret 0.6.5 (3,300+ sites) + holehe 1.61 (121 modules)	Username + Email OSINT on isolated worker threads with private event loops
Stealth Email	curl-cffi 0.16.3 (Chrome 124 impersonation)	JA3/TLS fingerprint bypass for WAF-blocked email checks
Enrichment	socid-extractor 0.1.1 (164 schemes, 449 fields)	Post-scan avatar/bio/metrics via batch_enrich (Basic/Full use_mutations)
Reports	reportlab + xmind + networkx	Gold PDF dossiers, XMind mind maps, identity network analytics
Ads	flet-ads 0.86.5	BannerAd 320×50 + InterstitialAd (every search, preload rotation) + UMP ConsentManager
Cache	6-layer pickle/JSON/png tiers under .flet/storage	Compiled DB (2.88× cold start), avatars, report fingerprints, geo, tag indices, DNS
Local Database	.flet/storage/data (storage.json)	Debounced atomic JSON store — settings, theme, selection scope, site-name cache, history

Visual Flow

graph TB
    subgraph SHERLOCK_CLIENT ["📱 SHERLOCK CLIENT (Local-First Dual OSINT App)"]
        UI["🎨 Flet 0.86.5 Reactive UI (Home | History | Settings | Social Networks)"]
        Engine["⚙️ Maigret + holehe Engines (isolated worker threads)"]
        Enrich["✨ socid-extractor Enrichment (Basic/Full)"]
        Cache["⚡ 6-Layer On-Device Cache"]
        Storage["💾 .flet Storage (atomic JSON)"]
        UI --> Engine
        Engine --> Enrich
        Engine --> Cache
        UI --> Storage
    end

    subgraph GLOBAL_RESOURCES ["🌐 EDGE DATABASE & PROVIDERS"]
        Targets["🎯 3,300+ Social + 120+ Email Servers (HTTPS)"]
    end

    Engine ==>|HTTPS GET/POST| Targets
    Enrich -.->|Profile fetch| Targets

Loading

---

Scan Performance Guide

To optimize execution speed, tune the sliders in Settings:

Scan Profile	Targets	Estimated Time	Best Suited For
Top 500	500 ranked networks	~30 Seconds	Quick broad sweep of the biggest platforms
Top 1,000	1,000 ranked networks	~1–2 Minutes	Balanced coverage and speed
Email (holehe)	121 modules	10–30 s	Use concurrency Slider 4–30; higher = faster but more rate-limits
Full Sweep	3,300+ Sites	2–4 Minutes	Deep exhaustive OSINT reports and full footprint audits

---

Privacy & Security

Sherlock is designed with a strict Privacy-First philosophy:

1. Local Connections: All network scans are sent directly from your own device IP address. No middleman, proxy, or server tracking — or via your configured socks5:// / http:// proxy if set.
2. Zero Logging: We do not log, track, or share your search history, checked usernames, or discovered profiles.
3. Sandbox Directories: .flet/storage/data|cache|temp via FLET_APP_STORAGE_* — the process CWD is storage/data during flet run, matching packaged app behavior (see .flet/README.md).
4. Data Sovereignty: Generated reports (PDF, .xmind, CSV, JSON, TXT) are saved wherever you choose via the system file picker — nothing leaves your device.

---

Legal Disclaimer

Sherlock is an OSINT information-gathering tool designed to audit public footprints. It only checks publicly accessible page structures. Users are solely responsible for ensuring compliance with target platforms' Terms of Service and local privacy regulations (e.g. GDPR, CCPA). The authors take no responsibility for misuse of this tool.