maigret: 🕵️‍♂️ Collect a dossier on a person by username from thousands of sites

This is a very interesting tool that allows you to search hundreds of websites for a given username. I also love that instead of it being built as a website that could be easily blocked, it is a Python package that you run locally. I did a quick pip3 install maigret and ran a scan for thingles, my most common username.

It found me all over the place.

Search by username thingles returned 39 accounts.
Found target's other IDs: dem5f4jv7dx2eb9mc978q7ucnw (yandex_public_id), 76561198286324524 (steam_id).
Search by yandex_public_id dem5f4jv7dx2eb9mc978q7ucnw returned 4 accounts.
Search by steam_id 76561198286324524 returned 3 accounts.
Extended info extracted from 10 accounts.
Countries: us, ru, in, tw, ca, cn, de
Interests (tags): gaming, photo, news, sharing, music, tech, shopping, hobby, stock, streaming, trading, video, messaging, wiki, documents, discussion, reading, writing, finance, coding, maps, forum

Here are the details that it got from just one service, Disqus. Note that maigret did not need authentication to get this. It was able to pull all of this information with just a username.

[+] Disqus: https://disqus.com/thingles
 ├─id: 5254
 ├─fullname: thingles
 ├─disqus_username: thingles
 ├─reputation: 1.291105
 ├─reputation_label: Average
 ├─following_count: 6
 ├─follower_count: 2
 ├─location: Minneapolis, MN
 ├─is_power_contributor: False
 ├─is_anonymous: False
 ├─created_at: 2007-12-31T03:19:58
 ├─upvotes_count: 11
 ├─website: http://thingelstad.com/
 ├─forums_count: 2
 ├─image: https://disqus.com/api/users/avatars/thingles.jpg
 ├─forums_following_count: 2
 ├─is_private: True
 └─comments_count: 96

Maigret also found a Yandex user with my username. That is a little odd to me. I have never used Yandex, and why did someone grab my rather unique username.

[+] YandexCollections API [Yandex]: https://yandex.ru/collections/api/users/thingles/
 ├─yandex_public_id: dem5f4jv7dx2eb9mc978q7ucnw
 ├─fullname: Леся Казакова

Security forensics folks could find this very valuable. I'll keep it around just to monitor my own information, and see what is discoverable.