sherlock

Takes a username and checks it against hundreds of social platforms, reporting where that handle exists. The legitimate uses are the boring ones and they are the reason it belongs here: auditing your own exposure before you decide what to make public, brand-name checking before a launch, and OSINT work during an authorised engagement. Python, MIT, widely used in security training. Two honest limits. Results carry false positives, because sites respond differently to missing profiles and the detection rules drift as platforms change. And the same tool aimed at someone else is stalking — several platforms rate-limit it for exactly that reason. Run it on yourself first; that is the use that pays.