If you're still using Sherlock for username recon, GoSearch is worth a look. It's a Go-based CLI that does the same thing (and more) but actually solves Sherlock's biggest problems.
What it does:
Username searches across 300+ social platforms and websites
False-positive filtering (yellow-coded results for uncertain matches, or run with --no-false-positives to only see confirmed hits)
Breach data lookups via HudsonRock, ProxyNova, and BreachDirectory
Common TLD/domain discovery based on the username
Concurrent scanning (Go is much faster than Python)
Attempts to crack password hashes found in breach data using Weakpass
Why it beats Sherlock:
It's written in Go, so it's significantly faster
Sherlock reports false positives (URLs that don't actually have the profile)
Sherlock misses actual usernames (false negatives), which GoSearch tries to fix
Native integration with breach databases Sherlock doesn't touch
Installation (requires Go installed):
Usage:
# Best practice: filter out false positives
# With breach data lookup (requires BreachDirectory API key)
Heads-up:
Windows Defender may flag it as malware (it's a Go binary, and antivirus engines tend to hate those). The developer addresses this in the repo—you can review the source, and only download from the official GitHub.
You need a BreachDirectory API key if you want the full breach lookup. Without it, it falls back to HudsonRock and ProxyNova.
If you only have a real name and no username, the repo recommends generating usernames with username-anarchy first.
🔗 GitHub: https://github.com/ibnaleem/gosearch
What it does:
Username searches across 300+ social platforms and websites
False-positive filtering (yellow-coded results for uncertain matches, or run with --no-false-positives to only see confirmed hits)
Breach data lookups via HudsonRock, ProxyNova, and BreachDirectory
Common TLD/domain discovery based on the username
Concurrent scanning (Go is much faster than Python)
Attempts to crack password hashes found in breach data using Weakpass
Why it beats Sherlock:
It's written in Go, so it's significantly faster
Sherlock reports false positives (URLs that don't actually have the profile)
Sherlock misses actual usernames (false negatives), which GoSearch tries to fix
Native integration with breach databases Sherlock doesn't touch
Installation (requires Go installed):
Code
go install github.com/ibnaleem/gosearch@latestUsage:
Code
gosearch -u [username]# Best practice: filter out false positives
Code
gosearch -u [username] --no-false-positives# With breach data lookup (requires BreachDirectory API key)
Code
gosearch -u [username] -b [API-KEY] --no-false-positivesHeads-up:
Windows Defender may flag it as malware (it's a Go binary, and antivirus engines tend to hate those). The developer addresses this in the repo—you can review the source, and only download from the official GitHub.
You need a BreachDirectory API key if you want the full breach lookup. Without it, it falls back to HudsonRock and ProxyNova.
If you only have a real name and no username, the repo recommends generating usernames with username-anarchy first.
🔗 GitHub: https://github.com/ibnaleem/gosearch
THE WORDS OF A WISE ONE

