Recon

A Deterministic CLI OSINT tool to identify someone based on their public social profiles and history given their username/email.

Features

• Search usernames across multiple platforms
• Fetch public profile metadata
• Aggregate posts and comments (where available)
• Extract emails and connected social profiles
• Correlate identities using heuristic matching

Note:

To search on instagram, twitter and facebook - you need the APIFY API key (set it in the .env):

Steps to get the APIFY key

Follow these steps to get your API key and configure your local environment:

Step 1: Get Your Apify API Key

1. Go to Apify Console and log in (or create an account).
2. Click on your profile icon in the bottom left corner and select Settings (or navigate to Settings > Integrations).
3. Click on the Integrations tab.
4. Under Personal API tokens, click Generate new token (or copy your existing default token).
5. Give your token a name (e.g., My App) and set the necessary permissions.
6. Click Generate and copy the token value.

Step 2: Add it to Your .env File

1. In the root directory of this project, create a file named .env (if it doesn't already exist).
2. Add your Apify key to the file like this:

APIFY_KEY=your_apify_api_token_here

Supported Platforms

• Reddit
• GitHub
• Mastodon
• Hacker News
• Discord
• Proton
• Twitter
• Facebook
• Instagram

Installation

Clone the repository

git clone https://github.com/losthread/recon.git
cd recon

Create a virtual environment

python -m venv venv

# macOS / Linux
source venv/bin/activate

# Windows
venv\Scripts\activate

Install dependencies

pip install -e .

Usage

Search by username:

recon -u <username>
recon -u <username> -s

-s is scan-only, doesn't perform heuristics - only checks if the username exists on that platform

How It Works

1. Fetch profiles from supported platforms asynchronously.
2. Normalize profile data into a common format.
3. Extract emails and connected social accounts.
4. Deduplicate discovered identities.
5. Correlate usernames, names, emails, locations, and linked accounts.
6. Return aggregated evidence for further analysis.

Disclaimer

Recon uses publicly available information and heuristic-based correlation to identify potentially related profiles. Results are not guaranteed to be accurate and may contain false positives or false negatives. Always verify findings independently before drawing conclusions or taking action.

This tool is intended for legitimate security research, OSINT, educational, and investigative purposes only. Users are solely responsible for ensuring their use complies with applicable laws, regulations, and the terms of service of the platforms being queried.

The author assumes no responsibility or liability for any misuse of this software or for any damages resulting from its use.

License

MIT