Fast username OSINT across 300+ sites (with breach lookups)

Fast username OSINT across 300+ sites (with breach lookups) - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: OpSec and OSINT (https://hackforums.net/forumdisplay.php?fid=322)
+---- Thread: Fast username OSINT across 300+ sites (with breach lookups) (/showthread.php?tid=6334407)

Fast username OSINT across 300+ sites (with breach lookups) - Th3HulK - Oct 21, 2026

If you're still using Sherlock for username recon, GoSearch is worth a look. It's a Go-based CLI that does the same thing (and more) but actually solves Sherlock's biggest problems.

What it does:
Username searches across 300+ social platforms and websites
False-positive filtering (yellow-coded results for uncertain matches, or run with --no-false-positives to only see confirmed hits)
Breach data lookups via HudsonRock, ProxyNova, and BreachDirectory
Common TLD/domain discovery based on the username
Concurrent scanning (Go is much faster than Python)
Attempts to crack password hashes found in breach data using Weakpass

Why it beats Sherlock:
It's written in Go, so it's significantly faster
Sherlock reports false positives (URLs that don't actually have the profile)
Sherlock misses actual usernames (false negatives), which GoSearch tries to fix
Native integration with breach databases Sherlock doesn't touch

Installation (requires Go installed):

Code 
go install github.com/ibnaleem/gosearch@latest

Usage:

Code 
gosearch -u [username]

# Best practice: filter out false positives

Code 
gosearch -u [username] --no-false-positives

# With breach data lookup (requires BreachDirectory API key)

Code 
gosearch -u [username] -b [API-KEY] --no-false-positives

Heads-up:
Windows Defender may flag it as malware (it's a Go binary, and antivirus engines tend to hate those). The developer addresses this in the repo—you can review the source, and only download from the official GitHub.

You need a BreachDirectory API key if you want the full breach lookup. Without it, it falls back to HudsonRock and ProxyNova.

If you only have a real name and no username, the repo recommends generating usernames with username-anarchy first.

🔗 GitHub: https://github.com/ibnaleem/gosearch