Commit Graph

2917 Commits

Author SHA1 Message Date
Paul Pfeister 4e2a4f6b66 Merge pull request #2919 from quan-nguyen-2110/fix-cracked-forum-false-positive
Fix Cracked Forum false positives
2026-05-04 23:28:52 -04:00
Paul Pfeister 2b985b57ad Merge pull request #2921 from quan-nguyen-2110/fix-akniga-false-negative
Fix akniga false negatives
2026-05-04 23:28:14 -04:00
Paul Pfeister ed0865363f Merge pull request #2929 from mohamedsolaiman/fix/false-positives
fix: resolve false positives for ArtStation, GeeksforGeeks, and LushStories
2026-05-04 23:23:43 -04:00
Paul Pfeister 43a354b235 Merge pull request #2853 from salmanrajz/fix/unicode-decode-error-special-chars
fix: handle UnicodeDecodeError on usernames with special characters
2026-05-04 23:12:52 -04:00
Paul Pfeister aa5c3b0010 Merge pull request #2930 from mohamedsolaiman/feature/new-sites
feat: add Carrd, SpaceHey, and Substack as supported sites
2026-05-04 23:07:07 -04:00
Siddharth Dushantha 2df7c61be8 Merge pull request #2939 from sherlock-project/fix-vuln
Fix command injection vuln
2026-05-02 09:46:59 +02:00
Siddharth Dushantha 61aae782ee version bump 2026-05-02 09:42:36 +02:00
Siddharth Dushantha 6eaec5cccd Fix command injection vuln 2026-05-02 09:27:28 +02:00
Mohamed Solaiman dca64e35d3 feat: add Carrd, SpaceHey, and Substack as supported sites
- Carrd: Simple website builder with profiles at {username}.carrd.co.
  Uses status_code detection (404 for non-existing profiles).

- SpaceHey: Retro social network inspired by MySpace.
  Uses message detection ("Not Found (Error 404) | SpaceHey" title
  for non-existing profiles).

- Substack: Newsletter/publishing platform with profiles at
  {username}.substack.com. Uses status_code detection (404 for
  non-existing publications).
2026-04-28 17:03:23 +00:00
Mohamed Solaiman 2e2248a8a6 fix: resolve false positives for ArtStation, GeeksforGeeks, and LushStories
- ArtStation: Add urlProbe using the JSON API endpoint
  (https://www.artstation.com/users/{}.json) which returns proper
  404 for non-existing users, instead of the main page which
  returns 200 for both existing and non-existing profiles.
  Closes #2714

- GeeksforGeeks: Switch from status_code to message detection.
  Both existing and non-existing profiles return HTTP 200, but
  non-existing profiles have "false" in the page title.
  Closes #2782

- LushStories: Switch from status_code to response_url detection.
  Non-existing profiles redirect (302) to /login while existing
  profiles return 200. Closes #2371
2026-04-28 17:01:37 +00:00
QuanNguyen a9960ff9a4 Fix akniga false negatives
Made-with: Cursor
2026-04-26 16:00:27 +02:00
QuanNguyen d731f715bf Fix Cracked Forum false positives
Made-with: Cursor
2026-04-26 15:44:27 +02:00
Siddharth Dushantha 271608fb22 Merge pull request #2898 from sherlock-project/improvements
Make Minor Improvements
2026-04-12 17:54:11 +02:00
Siddharth Dushantha eb79980c33 Remove unused line of code 2026-04-12 17:48:42 +02:00
Siddharth Dushantha e2a225697f Fix missing punctuation 2026-04-12 17:38:01 +02:00
Siddharth Dushantha 173ae5b824 Update usage 2026-04-12 17:35:14 +02:00
Siddharth Dushantha dcb935337c Remove --no-txt
It was removed a long time ago but the argumenet still exists.
2026-04-12 17:32:35 +02:00
Siddharth Dushantha ed883ad7c8 fix copy paste error 2026-04-12 16:55:54 +02:00
Siddharth Dushantha a68ea46fb4 Removed unesseary unnecessary returns 2026-04-12 16:54:42 +02:00
Siddharth Dushantha ed73b175d7 Use data.sherlockproject.xyz
I've created data.sherlockproject.xyz so that it will be eaiser for
people use Sherlock's data in other projects if needed.
2026-04-12 16:49:37 +02:00
Siddharth Dushantha a192cb4bfe Merge pull request #2897 from sherlock-project/clean-up
Minor clean up
2026-04-12 13:54:08 +02:00
Siddharth Dushantha b5e891550c Cleaned up footer text 2026-04-12 13:52:18 +02:00
Siddharth Dushantha 190c2af514 Mention uv as pip alternative 2026-04-12 13:50:55 +02:00
Siddharth Dushantha 8175af39ae Removed Apify Actor Usage 2026-04-12 13:47:20 +02:00
salmanrajz 32fde9bfc6 fix: update NSFW tests to use sites not in exclusions list
Pornhub was added to the remote false_positive_exclusions.txt, causing
test_remove_nsfw and test_nsfw_explicit_selection to fail since the
site gets filtered out before the test runs. Replaced with Xvideos and
Erome which are NSFW-flagged but not excluded.
2026-03-31 20:11:55 +04:00
salmanrajz 4656d95702 fix: handle UnicodeDecodeError on usernames with special characters
Fixes #2730. Usernames containing non-ASCII characters (e.g. 'Émile')
can trigger a UnicodeDecodeError inside the requests library during
redirect handling. This exception is not a subclass of
requests.exceptions.RequestException, so it escaped all existing
except blocks in get_response() and crashed the program.

Added a catch for UnicodeError (parent of both UnicodeDecodeError and
UnicodeEncodeError) so these sites are gracefully skipped instead of
crashing the entire scan.

Added regression tests in tests/test_unicode.py.
2026-03-31 19:57:54 +04:00
Paul Pfeister 574aeb4ac5 Merge pull request #2824 from vatsalgargg/fix-linkedin-waf
fix: bypass LinkedIn WAF blocking requests (HTTP 999)
2026-03-17 02:26:18 -04:00
vatsalgargg 382bc3210a fix: bypass LinkedIn WAF with standard browser headers 2026-03-12 23:14:40 +05:30
Paul Pfeister 17c443af19 Merge pull request #2812 from cclauss/patch-5
Test on Python 3.14 and free-threaded Python 3.14t
2026-03-08 17:34:47 -07:00
Paul Pfeister 9d6c47fdb4 Merge pull request #2811 from danielalanbates/fix/chess-com-case-sensitivity
fix: allow uppercase letters in Chess.com username regex
2026-02-28 22:18:26 -05:00
Christian Clauss 10bed20e70 Test on Python 3.14 and free-threaded Python 3.14t 2026-02-20 12:14:34 +01:00
Your Name fd3833b744 fix: allow uppercase letters in Chess.com username regex
Fixes #2799

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-19 11:24:27 -08:00
Paul Pfeister 8f8ebf3c15 Merge pull request #2794 from ellieplayswow/feature/add-wow-sites
data: add Wowhead, Wago addons, CurseForge
2026-02-04 17:39:01 -08:00
ellieplayswow 4253014085 data: add Wowhead, Wago addons, CurseForge 2026-02-03 21:06:11 +00:00
Paul Pfeister 725c68907a Merge pull request #2791 from amydosomething/add-sites
Add Shelf support
2026-01-24 00:49:10 -08:00
amydosomething c66d10bfed Remove Fiverr and Substack from PR 2026-01-20 19:53:27 +05:30
amydosomething e0002779b4 Add sites Fiverr, Substack and Shelf to data.json 2026-01-20 18:43:49 +05:30
Paul Pfeister 8f1308b90d Merge pull request #2758 from Aaditya-Chunekar/patch-2
Add Credly data to JSON resource
2025-12-29 19:54:44 -08:00
Paul Pfeister e856b05c2c Merge pull request #2636 from simplyNour/Bug/fix-gradle-false-pos-test-failure
Bug: Fix local variable scoping issue affecting false-pos test output
2025-12-29 18:56:30 -08:00
Aaditya fe9e750dab Add Credly data to JSON resource 2025-11-14 09:27:07 +05:30
Paul Pfeister 842ae1f754 Merge pull request #2733 from Aaditya-Chunekar/patch-1
Add Nothing Community data to data.json
2025-10-29 16:34:10 -07:00
Paul Pfeister 339634f7bc Merge pull request #2737 from Nolanp123/fix-minecraft-regex
Fix Minecraft False Positives for Long Usernames
2025-10-28 20:47:32 -07:00
Nolan Parker c1632693bb Add regexCheck to Minecraft to prevent false positives for long usernames 2025-10-28 20:39:53 -05:00
Aaditya e19cb32009 Add Nothing Community data to data.json 2025-10-27 11:20:30 +05:30
Paul Pfeister b69c8ef940 Merge pull request #2710 from Aaditya-Chunekar/add-sites
hacktoberfest: Added sites support
2025-10-26 00:16:29 -07:00
Aaditya-Chunekar 2724711060 feat: add tmdb 2025-10-26 09:49:31 +05:30
Paul Pfeister 0a68ab7f4c Merge pull request #2709 from Aaditya-Chunekar/add-topmate
hacktoberfest: Add topmate.io support
2025-10-24 20:15:02 -07:00
Paul Pfeister 8675178be1 Merge pull request #2705 from Aaditya-Chunekar/add-site-seoforum
hacktoberfest: Add SEO Forum Support
2025-10-24 20:12:50 -07:00
Aaditya-Chunekar 9bafb8a280 feat: add n8n, HackerSploit, Arduino Forum 2025-10-24 09:37:40 +05:30
Aaditya-Chunekar 8e5549862a feat: add topmate.io 2025-10-24 09:14:42 +05:30