sherlock-project / sherlock

Hunt down social media accounts by username across social networks
https://sherlockproject.xyz
MIT License
59.28k stars 6.8k forks source link

Release .exe executable build #2006

Closed zimonitrome closed 7 months ago

zimonitrome commented 7 months ago

Checklist

Description

It has come to my attention that some people attempting to use this repo are foreign to using Python.

Some people don't care too much about the code. They just want to download this amazing application and use it.

They might not understand why there's code, but would appreciate if a .EXE file was made and was simply handed to them. The dedicated maintainers might expect everyone to be developers that understands code. Well, some are not and they don't understand it. They only know to download and install applications. So what's the solution? Make an EXE file and give it to them. Again, thanks to the dedicated maintainers!

OrdinaryEnder commented 7 months ago

Just install python and do the 4 steps it's not that hard bro

master117 commented 7 months ago

Just install python and do the 4 steps it's not that hard bro

It absolutely is, you just don't understand how un-tech-savy the average person is. Experience Hell

ohaiibuzzle commented 7 months ago

My two cents (I've been observing the situation on Reddit): Probably not worth it.

Providing binaries would instantly lower the barrier to entry and increase the amount of people who don't know what they are doing, attempting to use Sherlock, creating issues for otherwise trivial questions because they can't quite comprehend how it works.

And

how un-tech-savy the average person

I don't see why "the average person" would suddenly carry out an OSINT operation? (Unless they are trying to find someone's social accounts and come to Sherlock from the Google keyword "find usernames across social networks", in which case, please get the binaries as far away from those as possible)

garandal245 commented 7 months ago

if a user cannot handle installing python and the steps they are 100% going to be unable to properly use a command line program properly and at that point to satisfy that you would need to actually make a UI which i imagine is something that the sherlock maintainers dont find a valuable use of time for an OSINT tool not even meant for a non tech savy person

decadent commented 7 months ago

The Python nature of this project inadvertently works as a minimal filter against script kiddie wannabes that encountered it somewhere as 'a tool to stalk someone online'. Not only it's advisable to raise the barrier of entry even further, but what you propose is directly immoral and despicable, and you should be banned from here with all speediness.

zimonitrome commented 7 months ago

I originally made this issue as a tongue in cheek joke and nod to the Reddit post, but I'm gonna try to argue for it nevertheless.

"un-tech-savy people" are already trying to use this repository, evident by some of the hilarious issues. Why don't we think that lowering the barrier for using the software would lead to these users having a successful experience (as in fulfilling their goals) and therefore not make these silly issues?

I don't see why "the average person" would suddenly carry out an OSINT operation? (Unless they are trying to find someone's social accounts and come to Sherlock from the Google keyword "find usernames across social networks", in which case, please get the binaries as far away from those as possible)

The first and only sentence describing this repo is literally "Hunt down social media accounts by username across social networks". Claiming that this repo is some "extremely complex OSINT resource" is a bit silly, since all of this can pretty much be done through Google.

Nevertheless it is a neat tool that speeds up the process.

I don't see why authors of a stable and popular open source project wouldn't want more people to have access to their tool.

As far as user interface is concerned, the binary app could simply open the default shell, prompt the user for a username, load and display social media accounts, then wait for the user to enter a specific key to exit. No grapical UI needed, and no other options since I doubt many of these users would want to use them anyway.

ohaiibuzzle commented 7 months ago

The first and only sentence describing this repo is literally "Hunt down social media accounts by username across social networks". Claiming that this repo is some "extremely complex OSINT resource" is a bit silly, since all of this can pretty much be done through Google.

It is a neat tool, can't deny. But you also can't deny it is (currently) the result that will be in your face when you Google for something that could be used for nefarious purposes.

In this case it might just be preferred to have at least some higher barrier to prevent (as the other people here mentioned) essentially script kiddies from doing it.

And if you know what tool you need already, or have some experiences, well, copying a few lines into a terminal is not going to be an issue for you, so why bother?

decadent commented 7 months ago

Claiming that this repo is some "extremely complex OSINT resource" is a bit silly, since all of this can pretty much be done through Google.

It's already evident from the word-salad issues that these people have the hacking chops of an ape with a purpose to stalk someone. Ascribing more intelligence to them than they have just makes the matter seem lighter than it is.

If you ever saw the deluge of creepy messages from randoms that women get on dating resources and social networks, you'd know how serious it is. But you don't.

DontEatOreo commented 7 months ago

I don't think this tool was ever meant for an average person, as it's strictly a CLI tool. Even if an .EXE file was made available, it would still not be useful to people who can't even install it.

Also, a tool like this SHOULD have some barrier to entry, and most people who are requesting .EXE probably aren't using it for anything good.

tornikeo commented 7 months ago

Here's an idea. We should add a joke .exe file that immediately opens a rickroll in the browser. That'd be fun.

bjd89 commented 7 months ago

If you dont understand the terminal maybe this isnt for you?

Ryuo1 commented 7 months ago

reserving my place here during this historical moment

Eugeny commented 7 months ago

Because this repo doesn't need an influx of morons asking how to hAcK An iNsTaGraM

Rosuav commented 7 months ago

We should add a joke .exe file that immediately opens a rickroll in the browser. That'd be fun.

Or even better: An EXE file that deliberately listens on a random socket (to trigger personal firewall warnings), then pops up something telling them "Spyware successfully installed" or something. Not that it ACTUALLY does anything harmful, of course, but it says so, as a reminder of what happens when you download binaries that you don't understand.

At least with a .py file, you can skim over the code before running it.

Tovape commented 7 months ago

We should add a joke .exe file that immediately opens a rickroll in the browser. That'd be fun.

Or even better: An EXE file that deliberately listens on a random socket (to trigger personal firewall warnings), then pops up something telling them "Spyware successfully installed" or something. Not that it ACTUALLY does anything harmful, of course, but it says so, as a reminder of what happens when you download binaries that you don't understand.

At least with a .py file, you can skim over the code before running it.

At this point just upload bonzi buddy renamed as sherlock.exe

Chizaruu commented 7 months ago

Let them cook.

https://github.com/Chizaruu/sherlock/releases/tag/v69

iderpHoi commented 7 months ago

Let them cook.

https://github.com/Chizaruu/sherlock/releases/tag/v69

mannnnn just talk in first person

zimonitrome commented 7 months ago

Let them cook.

https://github.com/Chizaruu/sherlock/releases/tag/v69

Amazing. Got that py2exe 400+MB binary 😍

iustusae commented 7 months ago

At this point just rewrite the whole shebang in c++ and watch the normies mald to their demise.

we will be there.

yumio7 commented 7 months ago

Since the python is so hard to get running you might as well just write the whole thing in asm.

Elyahu41 commented 7 months ago

No .msi installer?

MCPO-Spartan-117 commented 7 months ago

Windows users are amusing sometimes.

adyanth commented 7 months ago

Halfway through the download for lolz, I remembered I daily a MacBook :)

muelsyse-az commented 7 months ago

The worst part of this issue is that I can't tell if he's trolling :laughing:

FilipAndersson245 commented 7 months ago

At this point just rewrite the whole shebang in c++ and watch the normies mald to their demise.

we will be there.

Let's rewrite it in rust 🦀🦀🦀

FairyTail2000 commented 7 months ago

At this point just rewrite the whole shebang in c++ and watch the normies mald to their demise. we will be there.

Let's rewrite it in rust 🦀🦀🦀

I second this

Ryuo1 commented 7 months ago

What if we make it in C++ and force users to install 10 GB of build tools just to compile this project into a .exe file

IverCoder commented 7 months ago

This effort is not enough. We should upload this to the following official and well-known storefronts for maximum discoverability and user-friendliness:

heipl-paul commented 7 months ago

.dmg when?

FairyTail2000 commented 7 months ago

This effort is not enough. We should upload this to the following official and well-known storefronts for maximum user-friendliness:

This is not enough for Linux. It should provide:

Ryuo1 commented 7 months ago

A gentoo variant needed too!

IverCoder commented 7 months ago

This effort is not enough. We should upload this to the following official and well-known storefronts for maximum user-friendliness:

This is not enough for Linux. It should provide:

  • [ ] AppImage
  • [ ] .deb
  • [ ] .tar.gz
  • [ ] .rpm
  • [ ] Snap
  • [ ] Nix
  • [ ] bash install script
  • [ ] fish install script

I'd rather they spent the resources in publishing to the FreeBSD Ports instead. We can't let Linux become the new Windows (in terms of software availability), can we?

userbradley commented 7 months ago

Can we also include a package for my Samsung smart fridge whilst we're at it? It shouldn't be too hard, right? My friend who does computers said it should be easy and only take 10 minutes

Ruffy314 commented 7 months ago

Maybe an .exe could require the user to create / login to an account on each of the scanned platforms.
Manually, each time
And ask the user if they want to inform the scanned person via DM that they have been looked up

polidario commented 7 months ago

Can someone burn it or use .iso?

Raheemshah2809 commented 7 months ago

Just install python and do the 4 steps it's not that hard bro

It absolutely is, you just don't understand how un-tech-savy the average person is. Experience Hell

you're being lazy its literally one line of code to make an exe, use stack overflow or use chatgpt to help you.

polartron commented 7 months ago

Just install python and do the 4 steps it's not that hard bro

It absolutely is, you just don't understand how un-tech-savy the average person is. Experience Hell

you're being lazy its literally one line of code to make an exe, use stack overflow or use chatgpt to help you.

If it's one line of code then why is it so hard to provide an exe? Checkmate, atheist.

Raheemshah2809 commented 7 months ago

Just install python and do the 4 steps it's not that hard bro

It absolutely is, you just don't understand how un-tech-savy the average person is. Experience Hell

you're being lazy its literally one line of code to make an exe, use stack overflow or use chatgpt to help you.

If it's one line of code then why is it so hard to provide an exe? Checkmate, atheist.

Because everyone knows the people crying for an exe are people who are lazy and want the work done for them. learn to code sweetheart don't depend on others.

idanarye commented 7 months ago

At this point just rewrite the whole shebang in c++ and watch the normies mald to their demise.

we will be there.

Rewrite it in node.js and have it depend on leftpad.

Samxit commented 7 months ago

I want to be part of history...

marsidev commented 7 months ago

delete this

Lopoi commented 7 months ago

Best I can do is a .bat file:

git clone https://github.com/sherlock-project/sherlock.git
cd sherlock
pip install -r requirements.txt
cd sherlock
echo Please enter the username you want to search for:
set /p userName=
python sherlock.py %userName%
echo Press any key to exit...
pause

it's literally just the installation instructions

yumio7 commented 7 months ago

image

kidofcubes commented 7 months ago

Ought to make hardware for this so its plug and play :D

NicusorN5 commented 7 months ago

Can't tell if the original post is a troll or serious

FairyTail2000 commented 7 months ago

@NicusorN5 https://github.com/sherlock-project/sherlock/issues/2006#issuecomment-1952757454

I originally made this issue as a tongue in cheek joke and nod to the Reddit post, but I'm gonna try to argue for it nevertheless.

EnderNon commented 7 months ago

Best I can do is a .bat file:

git clone https://github.com/sherlock-project/sherlock.git
cd sherlock
pip install -r requirements.txt
cd sherlock
echo Please enter the username you want to search for:
set /p userName=
python sherlock.py %userName%
echo Press any key to exit...
pause

~it's literally just the installation instructions~

might be possible to also install python. does windows have a native way of downloading files from a batch script?

Lopoi commented 7 months ago

might be possible to also install python. does windows have a native way of downloading files from a batch script?

You can use msiexec to run the installers for python and git, but ideally you would want to check if they are installed first so you don't break stuff.

Also, you might need to refresh the cmd after installing them so it can recognize the new commands

CallumCarmicheal commented 7 months ago

At this point just rewrite the whole shebang in c++ and watch the normies mald to their demise.

we will be there.

What if we make it in C++ and force users to install 10 GB of build tools just to compile this project into a .exe file

You are all thinking too positive, we must make the build environment hell. It's not just about downloading the tools, we gotta make it hell by having each cpp file as their own library that cant be included. Put each function into its own C++ file, for even more fun make hell dependency tree then add a obvious recursive dependency at the end, something that most nerds could spot when compiling or reading the first line of the gcc error output.

g++ -c -o sher_help.o sher_help.cpp
g++ -c -o sher_parse_user_input.o sher_parse_user_input.cpp
g++ -c -o sher_process_arguments.o sher_process_arguments.cpp
g++ -c -o sher_process_domain.o sher_process_domain.cpp -I$CURL_INCLUDE_DIR -L$CURL_LIB_DIR -lcurl -Wl,-rpath=$CURL_LIB_DIR
ar rcs libsher_functions.a sher_help.o sher_parse_user_input.o sher_process_arguments.o sher_process_domain.o
g++ -o sherlock sher_main.cpp -L. -lsher_functions -Wl,-Bstatic -lsher_functions -Wl,-Bdynamic -L$CURL_LIB_DIR -lcurl -Wl,-rpath=$CURL_LIB_DIR
strip sherlock

# Compile each function separately into object files
# Compile sher_process_domain.cpp with Curl library and library path
# Create a static library from the object files
# Compile the main program and link it with both shared and static libraries
# `strip` to remove unnecessary symbols from the executable
TailsFanLOL commented 7 months ago

If you can't comprehend 3 fucking console commands, why are you even interested in using a CLI app?

Windows users these days...