k2sosint / whatsmyname

This repository has the unified data required to perform user enumeration on various websites. Content is in a JSON file and can easily be used in other projects.

WhatsMyName

What is WhatsMyName? It is a project that Micah "WebBreacher" Hoffman created in 2015 with the goal of discovering if usernames were used on a given website. He was frustrated with the false positives that were present in the username checkers of that time and so he made his own. Fast forward to today and many people have helped this open-source project evolve into what it is today.

If you are an OSINT person that has come here to run the tool, well, you are probably a bit disappointed right now. In May 2023, we decided to remove all checker scripts from the project and just focus on the project's core; its data file (wmn-dat.json).

So, we will keep finding sites and adding them and you can feel free to try any of the checker sites and scripts below that use our data.

How Does It Work?

WhatsMyName (WMN) consists of a JSON file with detections in it. Submissions from people all over the world are included. When a request is made to one of those sites from a tool like the ones in the next section, the server replies with data that will match one of our detections. It'll tell the checker script whether there is a valid user account with the name we specified on their site or not.

For a site to be included in WMN it has to:

1. Be accessible. We cannot check sites behind paywalls or user authentication.
2. Put the username in the URL. If the URL to view a user's profile does not have that username in it, this tool won't work.
3. Not modify the username in the URL. URLs that have added user ID numbers to the username will not work in WMN. Also, sites that take your username and map it to a user ID number and then put that in the URL will not work.

Tools/Web Sites Using WhatsMyName

• https://whatsmyname.app/ - Chris Poulter created this site which draws the project's JSON file into an easy to use web interface.
  • Filters for category and in search results.
  • Exports to CSV and other formats.
  • Pulls the latest version of the project's JSON file when run.
  • Submit a username in the URL using https://whatsmyname.app/?q=USERNAME like https://whatsmyname.app/?q=john
• Blackbird uses the Whats My Name list in its search.
• K2OSINT Bookmarklet - Bookmarklet that lets you enter a username in a popup and then opens a new tab with the WMN results.
• LinkScope uses this in the Whats My Name resolution under the Online Identity category.
• Maltego WhatsMyName Transforms - Maltego Local Transforms that leverage the JSON file and check for usernames in real time.
• Reveal My Name is created by @yooper and is the Python checker tool that was bundled with this project.
• sn0int downloads and uses the JSON file in the kpcyrd/whatsmyname module, see https://twitter.com/sn0int/status/1228046880459907073 for details and instructions.
• Spiderfoot uses this in the sfp_account module. There is also this video showing how to use this project using the Spiderfoot Command Line Interface (CLI).
• WhatsMyName-Python Whats My Name simple Python script made by @C3n7ral051nt4g3ncy
• WMN_screenshooter a helper script that uses Selenium to try and grab screenshots of identified profile pages.
• WhatsMyName-Client a simple Python script with 'request headers' and 'POST requests' support made by @grabowskiadrian. The script also allows you to test the configuration of the wmn-data.json file.

Content

• The https://github.com/WebBreacher/WhatsMyName/wiki/Problem-Removed-Sites page has websites that we have had in the project and are currently not working for some reason. We will retest those sites (in the future) and try to find detections.
• If you would like to help with detections, we are happy to accept them via GitHub pull request or you can create an issue with the details of the site.
• Want to suggest a site to be added? Use this form.

Format

See CONTRIBUTING

Social Media

Come follow us for updates. We are on:

• Mastodon at https://infosec.exchange/@whatsmyname

License

This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.