Sherlock
Sherlock is an open-source tool for quickly finding and analyzing related domains, subdomains, and other asset intelligence. It allows users to investigate domains and uncover relationships between websites, domains, networks, and email addresses.
domain-analysis
asset-discovery
subdomain-enumeration
Sherlock: Open-Source Tool for Domain Analysis
Find related domains, subdomains, and asset intelligence with Sherlock, an open-source tool designed for quick domain investigation and relationship discovery.
What is Sherlock?
Sherlock is an open-source intelligence tool developed by TheRook for gathering information about related domains, subdomains, and other assets connected to a root domain or email address. It functions by taking a root domain or email address as input and automatically querying various web services and online datasets to find associated domains, subdomains, IP addresses, plaintext credentials, and more.
Some of the key features of Sherlock include:
- Automatically discover associated subdomains, domain aliases, and typosquatting domains
- Retrieve current and historical IP addresses and hosting providers
- Identify related email addresses and usernames
- Check domains and subdomains for plaintext credentials
- Integrations with SecurityTrails, VirusTotal, Censys, etc.
- Customizable configuration for proxy support, output formats, etc.
- Actively maintained and supported by a large community of contributors
Sherlock provides both offensive and defensive cybersecurity analysts with an easy way to map out all digital assets associated with a domain or email address. The connections it finds can reveal vulnerabilities, infrastructure links, and attack surface insights. As an open source intelligence tool, Sherlock complements other security tools for footprint mapping, network reconnaissance, and attack simulation.
Sherlock Features
Features
- Subdomain enumeration
- Visualization of relationships
- Finding related domains
- Asset intelligence gathering
Pricing
- Open Source
Pros
Open source
Fast
Easy to use
Powerful features
Cons
Potential for abuse if used unethically
Requires some technical knowledge to use fully
Official Links
The Best Sherlock Alternatives
Top Security & Privacy and Threat Intelligence and other similar apps like Sherlock
Here are some alternatives to Sherlock:
Suggest an alternative ❐
Searx
Searx is an open source, privacy-respecting metasearch engine that can be self-hosted. It allows users to search multiple search engines like Google, Bing, Yahoo, DuckDuckGo, etc. from one interface without being tracked or profiled.As Searx doesn't save user search keywords, IP addresses or use tracking cookies, it protects the privacy...
Intelligence X
Intelligence Squared (also known as Intelligence X or IQ2) is an independent, non-partisan debate forum organization that hosts Oxford-style debates focused on current affairs and cultural issues. The debates feature prominent guest speakers arguing for and against motions such as "Ban Fast Food Advertising" or "The Catholic Church is a...
PrivacyWatch.app
PrivacyWatch.app is an application designed specifically for macOS to monitor access requests to sensitive components like the webcam, microphone, and location services. It runs quietly in the background and requires no configuration.When PrivacyWatch detects an attempt by an application to access the webcam or microphone that hasn't been explicitly authorized...
SpiderFoot
SpiderFoot is an open source intelligence (OSINT) automation tool used for gathering information from public sources. It helps collect data about IP addresses, domains, e-mail addresses, names, affiliations and more. SpiderFoot automates searches through over 100 data sources including search engines, PGP key servers, SHODAN, DNS records, subnets, ports, etc.Some...
SearXNG
SearXNG is an open source, privacy-respecting metasearch engine that aggregates results from over 70 search services without tracking users. It was forked from Searx in 2018 with the goal of providing unbiased and uncensored search results.As a metasearch engine, SearXNG sends search queries to multiple underlying search engines like Google,...
OSINTBuddy
OSINTBuddy is an open source intelligence (OSINT) and public records search tool for gathering information from public sources online. It brings together various OSINT techniques and modules into one platform to help users efficiently search through social networks, public records databases, news articles, domain lookups, image searches, and other open...
OSINT-tool
OSINT-tool is an open-source intelligence (OSINT) gathering and analysis software application designed to help investigators, researchers, journalists, and analysts search, collect, analyze, visualize, and export publicly available data. It integrates various OSINT techniques and sources into one platform to streamline online investigations.Some key features of OSINT-tool include the ability to...
Hudson Rock
Hudson Rock is an open-source continuous integration and delivery platform that allows teams to automate building, testing, and deploying their software projects. It provides an easy-to-use web interface for configuring pipelines made up of build, test, analysis, and deployment tasks.Key features of Hudson Rock include:Integration with source code repositories like...
Monocles search
Monocles Search is an open source, privacy-focused search engine that aims to provide a search experience that respects user privacy. Unlike other major search engines like Google or Bing, Monocles Search does not track, profile or target ads to individual users.Monocles uses an index of web pages to deliver fast...
Profil3r
Profil3r is an open source reconnaissance and profiling framework used to aid web penetration testers and security researchers. It automates the process of information gathering during assessments of web applications, networks, computers and individuals.Some key features of Profil3r include:Automated domain, network and personnel profilingIdentifies version numbers of web technologies for...
LibreX
LibreX is a powerful yet easy-to-use open source office suite for word processing, spreadsheets, presentations, graphics, databases and more. It is a free alternative to expensive commercial office suites like Microsoft Office.Some key features of LibreX:Includes a word processor, spreadsheet, presentation tool, vector graphics editor, and database managerFully compatible for...
