The release of the Snoop 1.4.0 project has been published, which develops a forensic OSINT tool that searches for user accounts in public data (open-source intelligence). The program analyzes various websites, forums, and social networks for the presence of the desired username, allowing users to determine on which sites the specified nickname is found. The project is based on research material in the field of public data scraping. Builds are prepared for Linux and Windows.
The code is written in Python and is distributed under a license that restricts its use to personal purposes only. The project is a branch of the Sherlock project codebase, which is provided under the MIT license (the fork was created due to the inability to expand the website database).
Snoop has been included in the Russian Unified Register of Russian Programs for Electronic Computing Machines and Databases under the declared code 26.30.11.16: 'Software ensuring the execution of established actions during operational-investigative activities: No7012 Order 07.10.2020 No515'. Currently, Snoop tracks the presence of users on over 3700 internet resources in the full version and on the most popular resources in the Demo version.
Key Changes:
- The search database has been expanded to 3716 sites.
- The speed of username search in the full Snoop database for GNU/Linux has been accelerated by 140%, almost 2.5 times (with an internet connection speed of at least 12 Mbps, username searches in quick mode '--quick/-q' last less than a minute).
- The launch speed of Snoop on older PCs with Windows/HDD has been improved.
- A new smart algorithm has been added to automatically detect unlisted/problematic/misencoded website encodings when searching in various modes.
- The informativeness in CLI has been expanded when searching in the reduced database, using filter options: '--site', '--exclude' or '--include' (the number of websites when narrowing the search is displayed in brackets to the right of the total number of sites in the database).
- The alert threshold for Bad_raw has been raised from 2% to 2.5%.
- The formatting of information in CLI on narrow/compressed terminals has been improved, for example, in the Termux CLI on Android (automatic line indentation has been added, taking into account the user's CLI environment).
- The HTML report has been updated:
- button styles have been changed;
- highlighting has been added, and the rows from the site list have been enlarged when hovering the cursor (it is now challenging to miss while selecting a resource);
- a duplicate line/tautology about how many resources have found 'username' has been removed;
- the visual component of grouping country flags has been enhanced;
- the display of soundtrack titles has been added when hovering the mouse over them.
- Fixed the network autotesting in verbose mode ‘—verbose/-v’ where tests sometimes failed due to certain connections. servers to accept connections over an unsecured channel.
- Sound alerts for errors and completion of search have been removed from the CLI in all versions of Snoop.
- Light builds have been added to the full version of Snoop, allowing the software to launch almost instantly.
- The search in verbose mode has been slightly accelerated on the Android platform.
- On the Android platform, if the user prefers to open HTML reports manually from their GUI FM, now all styles are also applied.
- The plugins ‘GEO_IP/domain’ and ‘ReverseVgeocoder’ have been updated. Data visualization in HTML reports in the full versions of Snoop has been expanded, including:
- a data filtering switch by countries;
- charts with statistics for countries, regions, objects, providers;
- a new layer — topographic maps, changes on click/shift;
- full-screen toggle mode;
- auto-display of coordinates at any point on the map;
- scale ruler;
- a reminder displaying statistics on InvalidData;
- copyright;
- search;
- In the ‘ReverseVgeocoder’ plugin, the coverage/accuracy scale has been increased by 10-100 times for districts/objects in the locations RU, EU, and CIS.
Source: opennet.ru
