Blackbird

An OSINT tool to search fast for accounts by username across 574 sites.

The Lockheed SR-71 "Blackbird" is a long-range, high-altitude, Mach 3+ strategic reconnaissance aircraft developed and manufactured by the American aerospace company Lockheed Corporation.

Disclaimer

This or previous program is for Educational purpose ONLY. Do not use it without permission. 
The usual disclaimer applies, especially the fact that me (P1ngul1n0) is not liable for any 
damages caused by direct or indirect use of the information or functionality provided by these 
programs. The author or any Internet provider bears NO responsibility for content or misuse 
of these programs or any derivatives thereof. By using these programs you accept the fact 
that any damage (dataloss, system crash, system compromise, etc.) caused by the use of these 
programs is not P1ngul1n0's responsibility.

Setup

Clone the repository

git clone https://github.com/p1ngul1n0/blackbird
cd blackbird

Install requirements

pip install -r requirements.txt

Usage

Search by username

python blackbird.py -u username

Run WebServer

python blackbird.py --web

Access http://127.0.0.1:9797 on the browser

Read results file

python blackbird.py -f username.json

List supported sites

python blackbird.py --list-sites

Use proxy

python blackbird.py -u crash --proxy http://127.0.0.1:8080

Show all results

By default only found accounts will be shown, however you can use the argument below to see all of them.

python blackbird.py -u crash --show-all

Docker

Blackbird can also be used with Docker.

Pull Image

docker pull p1ngul1n0/blackbird:v2

Run Webserver

docker run -p 9797:9797 p1ngul1n0/blackbird:v2 "--web"

Supported Social Networks

Most of the sites on this list were obtained through the incredible @whatsmynameproj project, don't forget to visit and follow them . 🤟

Export Report

The results can be exported as a PDF Report.

blackbird-pdf-cover

Metadata Extraction

When possible Blackbird will extract the user's metadata, bringing data such as name, bio, location and profile picture.

Random UserAgent

Blackbird uses a random UserAgent from a list of 1000 UserAgents in each request to prevent blocking.

Supersonic speed 🚀

Blackbird sends async HTTP requests, allowing a lot more speed when discovering user accounts.

JSON Template

    {
      "app": "ExampleAPP1",
      "url": "https://www.example.com/{username}",
      "valid": "response.status == 200",
      "id": 1,
      "method": "GET"
    }

    {
      "app": "ExampleAPP2",
      "url": "https://www.example.com/user",
      "valid": "jsonData['message']['found'] == True",
      "json": "{{\"type\": \"username\",\"input\": \"{username}\"}}",
      "id": 2,
      "method": "POST"
    }

    {
      "app": "Twitter",
      "id": 3,
      "method": "GET",
      "url": "https://nitter.net/{username}",
      "valid": "response.status == 200",
      "metadata": [
        {
          "type": "generic-data",
          "key": "Name",
          "value": "soup.find('a', class_='profile-card-fullname')['title']"
        },
        {
          "type": "generic-data",
          "key": "Bio",
          "value": "soup.find('div',class_='profile-bio').string"
        },
        {
          "type": "generic-data",
          "key": "Site",
          "value": "soup.find('div',class_='profile-website').text.strip('\\t\\r\\n')"
        },
        {
          "type": "generic-data",
          "key": "Member since",
          "value": "soup.find('div',class_='profile-joindate').find('span')['title']"
        },
        {
          "type": "image",
          "key": "picture",
          "value": "'https://nitter.net'+soup.find('a', class_='profile-card-avatar')['href']"
        },
        {
          "type": "location",
          "key": "location",
          "value": "soup.select_one('.profile-location:nth-of-type(2)').text.strip('\\t\\r\\n')"
        }
      ]
    }

Contributors 🏅

I'm grateful to all contributors who improved and bugfixed the project.

• @RelatedTitle - Fixed the Youtube user search URL.
• @prisar - Fixed the OS check for AsyncIO policy.
• @itmaru - Fixed 'across' typo.
• @Bryan-Herrera-DEV - Added Universocraft site.
• @devXprite - Added NPM and PyPI sites.
• @ChrisCarini - Fixed 'supported' typo.
• @Pandede - Fixed No such file or directory: 'python' #24 issue, reformatted with autopep8, implemented enumerate and code splitting for functions.
• @tr33n - Implemented random UserAgent for each request.
• @Sebsebzen - Added VKontakte (with metadata).
• @LsvanDarko - Added requests package to requirements.txt.
• @wymiotkloaki - Added basic .gitignore file and 21 sites.
• @dwaltsch - Added Dockerfile.

Planned features

• Implement Flask Web Server to optimize UX
• Export results in PDF
• Implement metadata extraction
• Publish a docker image
• Add unit test (Change ID to Appname, add "invalid-user" and "valid-user" params in JSON.)
• Export results in CSV
• Deploy on Cloud

Contact

Feel free to contact me on Twitter