The release of Snoop version 1.4.3 has been published, which develops a forensic OSINT tool that seeks user accounts in public data (open-source intelligence). The program analyzes various websites, forums, and social networks for the presence of the requested username, allowing you to identify which sites a user with the specified nickname exists on. The project is based on research work in the field of scraping public data. Builds are prepared for Linux and Windows.
The code is written in Python and is distributed under a license that restricts its use to personal purposes only. The project is a branch of the Sherlock project codebase, which is provided under the MIT license (the fork was created due to the inability to expand the website database).
Snoop has been included in the Russian Unified Register of Russian Programs for Electronic Computing Machines and Databases with the declared code 26.30.11.16: "Software that provides the execution of established actions when conducting operational investigative measures: No7012 order 07.10.2020 No515". Currently, Snoop tracks user presence on more than 5,000 internet resources in the full version and on the most popular resources in the Demo version.
In the past year since the last release, 160 commits have been added. Key changes include:
- The search database has been expanded to more than 5,300 sites.
- The algorithm for checking the 'username' from the file and CLI has been improved (inspection for prohibited special characters; phone numbers; detection of e-mail).
- In the HTML report, the list sorting algorithm has been changed to a more efficient one with checks and optimization (performance gains have been noted on large lists and weak PCs; moreover, the sorting has become clearly ordered: by emoji; location; alphabetically, excluding URL names).
- Experimental support for macOS has been added.
- In GNU/Linux, Termux, and macOS, processes are not equally secure: in UNIX-like OSs, processes and threads are now separated (although multiprocessing with the 'lock-free fork method' was viable and provided high performance, they cannot be relied upon in general; there are similar reports of issues from the official Python developer forum, where chaotic failures with multiprocessing occurred in some versions of macOS with Snoop, so for macOS, the logic of fast processes has been switched to safe but slower threads).
- The CSV report for Russian-speaking users of OS Windows is now generated with the field separator — ";" (for other users, the separator remains "," for better compatibility with Excel, the encoding has been changed to "utf-8-sig").
- A CLI splash screen has also been added for Windows OS, working in edition 22H2 and above.
- In UNIX-like operating systems, in the build versions of Snoop, the directory "~/snoop" has been moved and is now hidden: "~/.snoop" (this was done to avoid cluttering the user's home directory).
- Support for Python 3.14 has been added, the help format (the "-h/--help" option) has been adapted for the updated Python 3.14, and the HTML report now includes the year the audio tracks were written.
- The website counter in the build versions, which informs about the complete version of the database when searching in the CLI, was static and has become dynamic.
- Fixed an issue with connecting to the online Snoop database in some Windows OS in version 10.0.19045.
Source: opennet.ru
