Cyberlium

OSINT › Module 2 › Lesson 1

BeginnerModule 2Lesson 1/5

Usernames as Public Breadcrumbs

The same alias is a join key — then list YOUR handles from scope on

15 min+40 XP3 quiz
Module progress1 of 5

Visual · username_public_crumbs

One handle across sites is correlation. YOUR aliases only.

Opening

A username is not a costume. It is a string the internet can join without asking you again.

People reuse a handle because it is memorable. That reuse is a public breadcrumb: the same string on GitHub, Reddit, a game profile, and a forgotten forum is how strangers stitch a timeline. Self-OSINT asks whether YOUR chosen alias is rare enough to be a fingerprint, and whether old accounts still answer. It does not ask whether your classmate’s nickname is free on Instagram. Original Cyberlium.

1. Reuse is a join: treat YOUR alias like a key, not a joke

If HANDLE is rare, hits on many platforms probably are you. If HANDLE is a common word, hits are noise — still not a reason to pivot into other people’s accounts to “compare.” Write whether YOUR alias is rare or common in a note. That judgment is the lesson.

IntelTechniques maps username-check sites as public services. WhatsMyName and Namechk are two you will meet later. They are still pointed only at aliases in your scope file.

2. Old accounts you forgot are still public until you close them

Self-OSINT is often embarrassing rather than cinematic: a 2014 forum with the same nick, a pastebin of a config, a game clan page. You will list sites YOU remember using. You will not scrape a stranger’s steam page to practice.

If you have no public nick, write that honestly and still refuse classmate substitutes. The lab in this module can wait until you pick a throwaway alias you actually own.

Command guide

Old accounts you forgot are still public until you close them

═══ INSTALL ═══

Linux (Debian/Ubuntu):

Command — copy this

sudo apt install python3

macOS:

Command — copy this

brew install python3

Windows: Download https://python.org/downloads/

═══ COMMANDS ═══

Command — copy this

python3 - << 'PY'
from pathlib import Path
p = Path.home() / "cyberlium-lab" / "scope.env"
handle = ""
if p.exists():
  for line in p.read_text(encoding="utf-8", errors="replace").splitlines():
      if line.startswith("HANDLE="):
          handle = line.split("=", 1)[1].strip()
          break
print("len", len(handle), "alnum", handle.isalnum() if handle else False)
print("common_word_risk: if this is cat/admin/love, expect collisions — still only YOUR string")
PY

3. Tools come next; the feed must stay yours

Sherlock and Maigret will hammer many sites with one string. That is noisy and sometimes against a site’s terms — another reason you only use YOUR alias, slowly, with timeouts. You do not “help” a friend by pointing the firehose at them.

Write NEVER: Sherlock/Maigret classmates or strangers. Next lesson installs from official GitHub/pipx only.

Command guide

Tools come next; the feed must stay yours

═══ INSTALL ═══

Linux (Debian/Ubuntu):

Command — copy this

pipx install sherlock-project
pipx install maigret

macOS:

Command — copy this

pipx install sherlock-project
pipx install maigret

Windows:

Command — copy this

pip install sherlock-project
pip install maigret

═══ COMMANDS ═══

Command — copy this

grep -E "FEED|NEVER" "$HOME/cyberlium-lab/t12-m02-l01-username-crumbs.txt"

4. What you ship: HANDLE from scope, rare-vs-common judgment, feed rule

Confirm scope.env HANDLE is yours. Write whether it is a fingerprint or a common word. No classmate aliases. DEMO GATE. Notes 600.

5. What you record before the next lesson

Date. HANDLE (yours). rare/common. FEED rule. DEMO identified/STOP. File t12-m02-l01-username-crumbs.txt chmod 600.

6. Wrong vs right: strangers vs identifiers YOU own

Worked failure — same OSINT word, opposite target. Right never needs a classmate or a dump site.

  • Wrong

    Pick the most popular kid’s nick because it will “light up Sherlock.” nmap /24 for “user-named hosts.” Hydra a site that says username taken.

  • Right

    Read YOUR HANDLE. Write breadcrumb notes. Next: Sherlock and Maigret on YOUR Handle.

Mission: treat YOUR alias as a join key

1) / STOP if router. 2) Print HANDLE from scope.env and confirm it is yours. 3) Write rare-vs-common and a FEED-only-yours rule. Never inventory other people’s nicks.

Stuck? Ask Cyberlium AI Mentor

Ask Mentor how reuse becomes correlation — not how to find a stranger’s alts.

Knowledge Check

1

APPLY: scope.env HANDLE is still REPLACE_YOUR_HANDLE. You:

Multiple choice

Knowledge Check

2

APPLY: True or False: A common HANDLE (like alex) authorizes checking every Alex in your school.

True or False

Knowledge Check

3

APPLY: curl http://192.168.0.1/ is TP-Link Router Admin in a username lesson. You:

Multiple choice

← Previous

Answer all 3 knowledge checks to continue. (0/3 answered)