sherlock icon indicating copy to clipboard operation
sherlock copied to clipboard

False Negative for twitter search

Open Cr7pt0nic opened this issue 2 years ago • 4 comments

False negative when trying to scan usernames on that have attached twitters. This could lead to false reports and would be greatly appreciated if it's fixed. This is for every username I've tried that have valid accounts but show up as false negatives for example holiday8993

Cr7pt0nic avatar Oct 31 '22 11:10 Cr7pt0nic

False negative when trying to scan usernames on that have attached twitters. This could lead to false reports and would be greatly appreciated if it's fixed. This is for every username I've tried that have valid accounts but show up as false negatives for example holiday8993

Yup, I tried searching for the username, but it doesn't return any results from Twitter. But surprisingly, if you check out the result from Periscope, it redirects to Twitter as it has been closed recently.
image

rskbansal avatar Oct 31 '22 13:10 rskbansal

Found the issue. Twitter's url_probe's url, nitter.net currently has an expired certificate. image

This causes request_future's SSLError to be raised and causing all Twitter usernames to be flagged as not found.

kensim48 avatar Oct 31 '22 14:10 kensim48

Removing the "urlProbe" in data.json and running with the local flag, i.e. python sherlock holiday8993 --local will temporarily solve the issue until cert is renewed.

"Twitter": {
    "errorMsg": "<div class=\"error-panel\"><span>User ",
    "errorType": "message",
    "regexCheck": "^[a-zA-Z0-9_]{1,15}$",
    "url": "https://twitter.com/{}",
    "urlMain": "https://twitter.com/",
    "username_claimed": "blue",
    "username_unclaimed": "noonewouldeveru"
  }

kensim48 avatar Oct 31 '22 14:10 kensim48

Unsubscribe

On Mon, Oct 31, 2022, 10:53 AM Kenneth Sim @.***> wrote:

Removing the "urlProbe" in data.json and running with the local flag, i.e. python sherlock holiday8993 --local will temporarily solve the issue until cert is renewed.

"Twitter": { "errorMsg": "<div class="error-panel">User ", "errorType": "message", "regexCheck": "^[a-zA-Z0-9_]{1,15}$", "url": "https://twitter.com/{}", "urlMain": "https://twitter.com/", "username_claimed": "blue", "username_unclaimed": "noonewouldeveru" }

— Reply to this email directly, view it on GitHub https://github.com/sherlock-project/sherlock/issues/1601#issuecomment-1297207654, or unsubscribe https://github.com/notifications/unsubscribe-auth/AVIFNU7EOLYFZ5XDZVEHVZLWF7MOTANCNFSM6AAAAAARS7CSAA . You are receiving this because you are subscribed to this thread.Message ID: @.***>

Qb3129 avatar Nov 01 '22 18:11 Qb3129