nuclei-templates/http/osint/user-enumeration

Description

OSINT templates are available for conducting user enumeration across many websites. By utilizing the flag to input a user, Nuclei can verify the user's existence across all websites listed in the templates and report any instances of success.

Usage

The templates within the u directory are self-contained and do NOT require URLs as input because the OSINT templates have pre-defined static URLs. Each template in this directory expects the user(name), email, or phone number or list of it to be supplied as input using the V/var flag through the Nuclei engine.

# Running OSINT templates against a single user to test
nuclei -tags osint -var user=elon

OSINT templates can be also ran against list of usernames as well.

$ cat user_names.txt

user_1
user_2
user_3
user_4
user_5

# Running OSINT templates against a list of users to test
nuclei -tags osint -var user=user_names.txt

Categories

The OSINT templates are classified into categories such as archived, art, blog, business, coding, dating, finance, gaming, health, hobby, images, misc, music, news, political, search, shopping, social, tech, video, porn.

To execute OSINT templates within a particular category, you can apply a filter using the tags flag and set the prefix value to osint-.

# Running OSINT templates against the social category
nuclei -t osint/ -tags osint-social -var user=some-user

# Running OSINT templates against the multiple categories
nuclei -t osint/ -tags osint-social,osint-finance -var user=some-user

Acknowledgment

These OSINT templates were inspired by the WebBreacher/WhatsMyName repository.