sherlock-project / sherlock

Hunt down social media accounts by username across social networks
https://sherlockproject.xyz
MIT License
60.53k stars 6.96k forks source link

Requesting support for: Velog #2322

Closed Nuung closed 2 weeks ago

Nuung commented 1 month ago

Site URL

https://velog.io/

Additional info

Velog is a popular development blogging platform in Korea.

Many Korean developers, especially junior developers, frequently use Velog to share their technical knowledge and experiences.

Sherlock can detect if a username exists on Velog by using:

  1. URL Pattern: https://velog.io/@{username}/posts to check for profiles.

    • Example: When querying a non-existent user:

      curl -I "https://velog.io/@asdsgsthsd/posts"

      Response:

      HTTP/2 404
      date: Wed, 09 Oct 2024 08:56:33 GMT
      content-type: text/html; charset=utf-8
      access-control-allow-credentials: true
      access-control-allow-methods: GET,DELETE,PATCH,POST,PUT
      access-control-allow-origin: *
      vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding
      link: <https://assets.velcdn.com/_next/static/media/498cd24af98ee1c5-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", <https://assets.velcdn.com/_next/static/media/8f32c48a86b1398a-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", <https://assets.velcdn.com/_next/static/media/e0c8a07f5438bca2-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2"
      x-powered-by: Next.js
      cache-control: private, no-cache, no-store, max-age=0, must-revalidate
    • Example: When querying an existing user:

      curl -I "https://velog.io/@qlgks1/posts"

      Response:

      HTTP/2 200
      date: Wed, 09 Oct 2024 08:59:17 GMT
      content-type: text/html; charset=utf-8
      access-control-allow-credentials: true
      access-control-allow-methods: GET,DELETE,PATCH,POST,PUT
      access-control-allow-origin: *
      vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding
      link: <https://assets.velcdn.com/_next/static/media/498cd24af98ee1c5-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", <https://assets.velcdn.com/_next/static/media/8f32c48a86b1398a-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", <https://assets.velcdn.com/_next/static/media/e0c8a07f5438bca2-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2"
      x-powered-by: Next.js
      cache-control: private, no-cache, no-store, max-age=0, must-revalidate
  2. As a result, Status Code 404 indicates that the profile does not exist and returns a "Not Found" error.

Code of Conduct