WebBreacher / WhatsMyName

This repository has the JSON file required to perform user enumeration on various websites.
https://whatsmyname.app/
Other
1.73k stars 293 forks source link

Add vinted.nl #412

Closed WebBreacher closed 2 years ago

WebBreacher commented 2 years ago

For this URL https://www.vinted.nl/member/general/search?search_text=john you will use the site's search since the links to the user profiles have random numbers in them.

WebBreacher commented 2 years ago

@C3n7ral051nt4g3ncy @K2SOsint either of you want to do this?

C3n7ral051nt4g3ncy commented 2 years ago

Will try to add

K2SOsint commented 2 years ago

@C3n7ral051nt4g3ncy send me a DM on Twitter if you need any assistance. @WebBreacher is this the work-around for other forums as well when we encounter usernames with random numbers? Divert to the search options? If so, then I will add some more forums in the coming weeks...

WebBreacher commented 2 years ago

@K2SOsint yes. If possible, we try to find the exact user. If not, we can use the site's search and look for positive results. We use this with the archive.org site.

C3n7ral051nt4g3ncy commented 2 years ago

I am getting a false positive for vinted.

WebBreacher commented 2 years ago

Perhaps sharing your JSON would help us tweak it? And maybe sharing your script output?

C3n7ral051nt4g3ncy commented 2 years ago

{ "name" : "vinted", "check_uri" : "https://www.vinted.nl/member/general/search?search_text={account}", "account_existence_code" : "200", "account_existence_string" : "userId", "account_missing_string" : "geen resultaten", "account_missing_code" : "200", "known_accounts" : ["john", "jack"], "category" : "business", "valid" : true }

WebBreacher commented 2 years ago

lets change the account_existence_string to flag-box-flag-box-top since userId appears in JavaScript.

C3n7ral051nt4g3ncy commented 2 years ago

Thanks for your help and input! Much appreciated

C3n7ral051nt4g3ncy commented 2 years ago

@WebBreacher :

WebBreacher commented 2 years ago

Added with #435