Closed zimonitrome closed 7 months ago
Just install python and do the 4 steps it's not that hard bro
Just install python and do the 4 steps it's not that hard bro
It absolutely is, you just don't understand how un-tech-savy the average person is. Experience Hell
My two cents (I've been observing the situation on Reddit): Probably not worth it.
Providing binaries would instantly lower the barrier to entry and increase the amount of people who don't know what they are doing, attempting to use Sherlock, creating issues for otherwise trivial questions because they can't quite comprehend how it works.
And
how un-tech-savy the average person
I don't see why "the average person" would suddenly carry out an OSINT operation? (Unless they are trying to find someone's social accounts and come to Sherlock from the Google keyword "find usernames across social networks", in which case, please get the binaries as far away from those as possible)
if a user cannot handle installing python and the steps they are 100% going to be unable to properly use a command line program properly and at that point to satisfy that you would need to actually make a UI which i imagine is something that the sherlock maintainers dont find a valuable use of time for an OSINT tool not even meant for a non tech savy person
The Python nature of this project inadvertently works as a minimal filter against script kiddie wannabes that encountered it somewhere as 'a tool to stalk someone online'. Not only it's advisable to raise the barrier of entry even further, but what you propose is directly immoral and despicable, and you should be banned from here with all speediness.
I originally made this issue as a tongue in cheek joke and nod to the Reddit post, but I'm gonna try to argue for it nevertheless.
"un-tech-savy people" are already trying to use this repository, evident by some of the hilarious issues. Why don't we think that lowering the barrier for using the software would lead to these users having a successful experience (as in fulfilling their goals) and therefore not make these silly issues?
I don't see why "the average person" would suddenly carry out an OSINT operation? (Unless they are trying to find someone's social accounts and come to Sherlock from the Google keyword "find usernames across social networks", in which case, please get the binaries as far away from those as possible)
The first and only sentence describing this repo is literally "Hunt down social media accounts by username across social networks". Claiming that this repo is some "extremely complex OSINT resource" is a bit silly, since all of this can pretty much be done through Google.
Nevertheless it is a neat tool that speeds up the process.
I don't see why authors of a stable and popular open source project wouldn't want more people to have access to their tool.
As far as user interface is concerned, the binary app could simply open the default shell, prompt the user for a username, load and display social media accounts, then wait for the user to enter a specific key to exit. No grapical UI needed, and no other options since I doubt many of these users would want to use them anyway.
The first and only sentence describing this repo is literally "Hunt down social media accounts by username across social networks". Claiming that this repo is some "extremely complex OSINT resource" is a bit silly, since all of this can pretty much be done through Google.
It is a neat tool, can't deny. But you also can't deny it is (currently) the result that will be in your face when you Google for something that could be used for nefarious purposes.
In this case it might just be preferred to have at least some higher barrier to prevent (as the other people here mentioned) essentially script kiddies from doing it.
And if you know what tool you need already, or have some experiences, well, copying a few lines into a terminal is not going to be an issue for you, so why bother?
Claiming that this repo is some "extremely complex OSINT resource" is a bit silly, since all of this can pretty much be done through Google.
It's already evident from the word-salad issues that these people have the hacking chops of an ape with a purpose to stalk someone. Ascribing more intelligence to them than they have just makes the matter seem lighter than it is.
If you ever saw the deluge of creepy messages from randoms that women get on dating resources and social networks, you'd know how serious it is. But you don't.
I don't think this tool was ever meant for an average person, as it's strictly a CLI tool. Even if an .EXE
file was made available, it would still not be useful to people who can't even install it.
Also, a tool like this SHOULD have some barrier to entry, and most people who are requesting .EXE
probably aren't using it for anything good.
Here's an idea. We should add a joke .exe file that immediately opens a rickroll in the browser. That'd be fun.
If you dont understand the terminal maybe this isnt for you?
reserving my place here during this historical moment
Because this repo doesn't need an influx of morons asking how to hAcK An iNsTaGraM
We should add a joke .exe file that immediately opens a rickroll in the browser. That'd be fun.
Or even better: An EXE file that deliberately listens on a random socket (to trigger personal firewall warnings), then pops up something telling them "Spyware successfully installed" or something. Not that it ACTUALLY does anything harmful, of course, but it says so, as a reminder of what happens when you download binaries that you don't understand.
At least with a .py file, you can skim over the code before running it.
We should add a joke .exe file that immediately opens a rickroll in the browser. That'd be fun.
Or even better: An EXE file that deliberately listens on a random socket (to trigger personal firewall warnings), then pops up something telling them "Spyware successfully installed" or something. Not that it ACTUALLY does anything harmful, of course, but it says so, as a reminder of what happens when you download binaries that you don't understand.
At least with a .py file, you can skim over the code before running it.
At this point just upload bonzi buddy renamed as sherlock.exe
Let them cook.
Let them cook.
mannnnn just talk in first person
Let them cook.
Amazing. Got that py2exe 400+MB binary 😍
At this point just rewrite the whole shebang in c++ and watch the normies mald to their demise.
we will be there.
Since the python is so hard to get running you might as well just write the whole thing in asm.
No .msi installer?
Windows users are amusing sometimes.
Halfway through the download for lolz, I remembered I daily a MacBook :)
The worst part of this issue is that I can't tell if he's trolling :laughing:
At this point just rewrite the whole shebang in c++ and watch the normies mald to their demise.
we will be there.
Let's rewrite it in rust 🦀🦀🦀
At this point just rewrite the whole shebang in c++ and watch the normies mald to their demise. we will be there.
Let's rewrite it in rust 🦀🦀🦀
I second this
What if we make it in C++ and force users to install 10 GB of build tools just to compile this project into a .exe file
This effort is not enough. We should upload this to the following official and well-known storefronts for maximum discoverability and user-friendliness:
.dmg when?
This effort is not enough. We should upload this to the following official and well-known storefronts for maximum user-friendliness:
- [ ] Microsoft Store for Windows
- [ ] Flathub for Linux
- [ ] App Store for macOS
- [ ] App Store for iOS and iPadOS
- [ ] Self-hosted AltStore source for iOS
- [ ] Google Play Store for Android
- [ ] F-Droid and IzzyOnDroid for Android
This is not enough for Linux. It should provide:
A gentoo variant needed too!
This effort is not enough. We should upload this to the following official and well-known storefronts for maximum user-friendliness:
- [ ] Microsoft Store for Windows
- [ ] Flathub for Linux
- [ ] App Store for macOS
- [ ] App Store for iOS and iPadOS
- [ ] Self-hosted AltStore source for iOS
- [ ] Google Play Store for Android
- [ ] F-Droid and IzzyOnDroid for Android
This is not enough for Linux. It should provide:
- [ ] AppImage
- [ ] .deb
- [ ] .tar.gz
- [ ] .rpm
- [ ] Snap
- [ ] Nix
- [ ] bash install script
- [ ] fish install script
I'd rather they spent the resources in publishing to the FreeBSD Ports instead. We can't let Linux become the new Windows (in terms of software availability), can we?
Can we also include a package for my Samsung smart fridge whilst we're at it? It shouldn't be too hard, right? My friend who does computers said it should be easy and only take 10 minutes
Maybe an .exe could require the user to create / login to an account on each of the scanned platforms.
Manually, each time
And ask the user if they want to inform the scanned person via DM that they have been looked up
Can someone burn it or use .iso?
Just install python and do the 4 steps it's not that hard bro
It absolutely is, you just don't understand how un-tech-savy the average person is. Experience Hell
you're being lazy its literally one line of code to make an exe, use stack overflow or use chatgpt to help you.
Just install python and do the 4 steps it's not that hard bro
It absolutely is, you just don't understand how un-tech-savy the average person is. Experience Hell
you're being lazy its literally one line of code to make an exe, use stack overflow or use chatgpt to help you.
If it's one line of code then why is it so hard to provide an exe? Checkmate, atheist.
Just install python and do the 4 steps it's not that hard bro
It absolutely is, you just don't understand how un-tech-savy the average person is. Experience Hell
you're being lazy its literally one line of code to make an exe, use stack overflow or use chatgpt to help you.
If it's one line of code then why is it so hard to provide an exe? Checkmate, atheist.
Because everyone knows the people crying for an exe are people who are lazy and want the work done for them. learn to code sweetheart don't depend on others.
At this point just rewrite the whole shebang in c++ and watch the normies mald to their demise.
we will be there.
Rewrite it in node.js and have it depend on leftpad.
I want to be part of history...
delete this
Best I can do is a .bat
file:
git clone https://github.com/sherlock-project/sherlock.git
cd sherlock
pip install -r requirements.txt
cd sherlock
echo Please enter the username you want to search for:
set /p userName=
python sherlock.py %userName%
echo Press any key to exit...
pause
it's literally just the installation instructions
Ought to make hardware for this so its plug and play :D
Can't tell if the original post is a troll or serious
@NicusorN5 https://github.com/sherlock-project/sherlock/issues/2006#issuecomment-1952757454
I originally made this issue as a tongue in cheek joke and nod to the Reddit post, but I'm gonna try to argue for it nevertheless.
Best I can do is a
.bat
file:git clone https://github.com/sherlock-project/sherlock.git cd sherlock pip install -r requirements.txt cd sherlock echo Please enter the username you want to search for: set /p userName= python sherlock.py %userName% echo Press any key to exit... pause
~it's literally just the installation instructions~
might be possible to also install python. does windows have a native way of downloading files from a batch script?
might be possible to also install python. does windows have a native way of downloading files from a batch script?
You can use msiexec
to run the installers for python and git, but ideally you would want to check if they are installed first so you don't break stuff.
Also, you might need to refresh the cmd after installing them so it can recognize the new commands
At this point just rewrite the whole shebang in c++ and watch the normies mald to their demise.
we will be there.
What if we make it in C++ and force users to install 10 GB of build tools just to compile this project into a .exe file
You are all thinking too positive, we must make the build environment hell. It's not just about downloading the tools, we gotta make it hell by having each cpp file as their own library that cant be included. Put each function into its own C++ file, for even more fun make hell dependency tree then add a obvious recursive dependency at the end, something that most nerds
could spot when compiling or reading the first line of the gcc error output.
g++ -c -o sher_help.o sher_help.cpp
g++ -c -o sher_parse_user_input.o sher_parse_user_input.cpp
g++ -c -o sher_process_arguments.o sher_process_arguments.cpp
g++ -c -o sher_process_domain.o sher_process_domain.cpp -I$CURL_INCLUDE_DIR -L$CURL_LIB_DIR -lcurl -Wl,-rpath=$CURL_LIB_DIR
ar rcs libsher_functions.a sher_help.o sher_parse_user_input.o sher_process_arguments.o sher_process_domain.o
g++ -o sherlock sher_main.cpp -L. -lsher_functions -Wl,-Bstatic -lsher_functions -Wl,-Bdynamic -L$CURL_LIB_DIR -lcurl -Wl,-rpath=$CURL_LIB_DIR
strip sherlock
# Compile each function separately into object files
# Compile sher_process_domain.cpp with Curl library and library path
# Create a static library from the object files
# Compile the main program and link it with both shared and static libraries
# `strip` to remove unnecessary symbols from the executable
If you can't comprehend 3 fucking console commands, why are you even interested in using a CLI app?
Windows users these days...
Checklist
Description
It has come to my attention that some people attempting to use this repo are foreign to using Python.
Some people don't care too much about the code. They just want to download this amazing application and use it.
They might not understand why there's code, but would appreciate if a .EXE file was made and was simply handed to them. The dedicated maintainers might expect everyone to be developers that understands code. Well, some are not and they don't understand it. They only know to download and install applications. So what's the solution? Make an EXE file and give it to them. Again, thanks to the dedicated maintainers!