Nowadays Social media is getting very popular. There are lots of social media sites around us, like Twitter, Instagram, Facebook, YouTube, Reddit, Pinterest, Tumblr, Medium etc. Userrecon is a great tool to discover social media accounts by usernames. Everyone knows that information gathering is very important in penetration testing, but the information collected from one social media is not enough.
This is very helpful for a security researcher. We can collect any information of a human. We can generate a bigger password list. Userrecon can help to find a username across 75+ social media sites. This tool is very helpful in location tracking and footprint.
Userrecon is a shell script, it is very easy to use. To use this tool we need to download/clone it from Github by applying the following command :
git clone https://github.com/thelinuxchoice/userrecon
The screenshot of the preceding command is the following:
Then we go to the userrecon folder using cd command :
and then we give the script executable permission by using the following command:
chmod +x userrecon.sh
The screenshot is following:
Now we can run this tool by applying the following command:
Then the tool userrecon will start, as the following screenshot:
Here userrecon asks for username of our target. We just need to type the username and press Enter, userrecon will start scanning, like the following screenshot:
Userrecon scan over 75 social media website for a given username. After scanning userrecon will save a log in txt file we can check the social media accounts by using those discovered links. Isn’t it easy and super cool ?
Feel free to leave a comment below or reach me on Instagram @iamshubhamkumar__.