HandleHawk - 构建跨平台用户名侦察工具

项目说明

🦅 HandleHawk

HandleHawk is a cross-platform username reconnaissance tool for OSINT analysts, CyberSecurity professionnals, Red Teamers, and CTF enthusiasts.
It scans multiple social platforms to gather publicly a user information by just a single username input.

> "Find the signal in the noise."

![Code style: black]()

<p align="center">
<img src="Assets/HandleHawk_Logo.png" alt="HandleHawk Logo" width="733">
</p>

📁 Repository Structure

---

✔ Currently Supported Platforms

| Platform | Logo | Supported |
|----------|------|-----------|
| BlueSky | <img src="Assets/Bluesky_Logo.png" alt="BlueSky" height="40"/> | ✅ |
| Hudson Rock | <img src="Assets/Hudsonrock_Logo.png" alt="Hudson Rock" height="40"/> | ✅ |
| Mastodon | <img src="Assets/Mastodon_Logo.png" alt="Mastodon" height="40"/> | ✅ |
| Nostr | <img src="Assets/Nostr_Logo.png" alt="Nostr" height="40"/> | ✅ |
| PayPal | <img src="Assets/Paypal_Logo.png" alt="PayPal" height="40"/> | ✅ |
| Reddit | <img src="Assets/Reddit_Logo.png" alt="Reddit" height="40"/> | ✅ |
| Snapchat | <img src="Assets/Snapchat_Logo.png" alt="Snapchat" height="40"/> | ✅ |
| TruthSocial | <img src="Assets/Truth-Social_Logo.png" alt="Nostr" height="40"/> | ✅ |
| X (Twitter) | <img src="Assets/X_Logo.png" alt="X/Twitter" height="40"/> | ✅ + API |

---

🚀 Features

🔍 Scans multiple platforms:

- Bluesky
- Mastodon
- Nostr
- PayPal
- Reddit
- Snapchat
- TruthSocial
- Twitter ( RapidAPI)

🥷🏻 Infostealer information from a username with the Hudson Rock module

🛡️ Resilient to Cloudflare thanks to cloudscraper

📄 Generates a clean, dark-mode HTML report

🧠 Smart spinner for each check (UX-friendly)

🔐 Optional Twitter API key (kept local)

---

🧠 Ad Nostr Support

✅ Supports pagination through *all a pages* of Nostr search results (up to hundreds of results!)

🔁 Converts hex-encoded pubkeys to Nostr npub format using Bech32 encoding

🔗 Generates accurate profile links:

📅 Displays account creation date and time in human-readable format

> This allows HandleHawk to return all Nostr profiles that match a username, with rich metadata and clickable profile URLs — not just the first few!

📦 Installation

---

🔑 Twitter API Key (Optional)

To enable Twitter checks (), do the following:

Create a free account on Rapid API

Choose the free Twitter API plan (1000 requests per month) by Alexander

Paste your API key into the file twitter_api_key.txt

If no key is found, HandleHawk will skip X/Twitter and continue without errors

---

⚙️ Usage

Run the tool from terminal:

---

🛣️ Roadmap

A list of upcoming features and impro planned for HandleHawk:

✅ v1.0 (Completed)

[x] Core recon engine with spinner animations

[x] Cross-platform username scanning for:

- [x] Reddit
- [x] Mastodon
- [x] Bluesky
- [x] TruthSocial
- [x] Nostr
- [x] Snapchat

[x] Twitter (X) scanning RapidAPI key

[x] HTML report generator with profile summaries & images which does more than other username enumeration tools

[x] Optional API_KEY/ folder for key management

[x] User-agent spoofing & anti-bot headers

---

✅ v1.1 (Completed)

- [x] PayPal module added (platforms/paypal.py)
- [x] Extract PayPal full name, currency, and avatar
- [x] Refactored architecture to support modular platform checks
- [x] Improved HTML report with PayPal-specific display logic
- [x] Clean integration of external paypal.py instead of monolithic block

---

✅ v1.2 (Completed)

- [x] Hudson Rock module added to pull stealerinfo from a username module added (platforms/hudsonrock.py)

---

🧠 Planned for v1.3

[ ] CS export

[ ] JSON output for automation

[ ] Support for more platforms:

- [ ] Threads
- [ ] Facebook
- [ ]
- [ ] LinkedIn
- [ ] YouTube
- [ ] GitHub

---

👨‍💻 Author

De by C3n7ral051nt4g3ncy

---

💡 Suggestions?

Open an issue or start a discussion! Contributions and feature ideas are welcome 🦅

If you use HandleHawk in your in, feel free to give a ⭐️ or suggest a feature!

项目信息

开发语言：HTML

Star 数：145

技术要点

该项目属于CTF思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Cross-platform username reconnaissance tool built for OSINT investigators, cyber threat analysts, red teamers, and CTF enthusiasts.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。