GDE-060 |
Tookie-OSINT | |||||||
Username and social account discovery | ||||||||
September 2026 | ||||||||
01
What it is
Tookie-OSINT is the practice of using the free, open-source Tookie tool to discover social media accounts tied to a username across a broad set of platforms, returning a straightforward account list similar in category to Sherlock, Maigret and Blackbird.
Tookie-OSINT (formerly published under a different project name before a rebrand) is a free, open-source, MIT-licensed Python tool with more than 2,000 GitHub stars that checks a submitted username against a broad list of social platforms and reports which return a matching account. It emphasises a simple, straightforward interface over the deeper profile extraction Maigret performs, making it a fast first pass rather than a full dossier-building tool.
Community comparisons place it alongside Sherlock, Blackbird and Maigret as an alternative in the same username-enumeration category, with users noting its ease of use as a distinguishing factor rather than unique coverage or features.
| When to use this guide
|
02
How do you run a Tookie-OSINT search?
Six steps from a first quick pass through to cross-checking and recording results properly.
The following tools are used across the steps below.
Tookie-OSINT: Free, open-source (MIT licence). The command-line username-search tool itself.
Signal & Shadow's Sherlock guide: Free. A comparable tool for cross-checking a Tookie-OSINT result.
| Before you begin Stop at the login. Tookie-OSINT queries public profile pages and does not require a login for the investigator or the target account. Legal considerations. As with any username-enumeration tool, a returned account list is personal data once tied to an identifiable individual; document a lawful basis for the specific investigation before running a search and avoid retaining results beyond what the active case requires. |
Run the tool against the target username to generate an initial list of platforms returning a matching account, using its straightforward default settings.
Open each returned platform link directly to confirm the account's content, profile photo or activity is plausibly the same individual, rather than accepting the tool's list at face value.
Run the same username through a second enumeration tool with its own underlying platform list, since Tookie-OSINT's coverage will not perfectly match either.
Record any hit unique to this tool's platform list, since a different implementation can occasionally surface an account another tool's list does not cover.
No hits returned means no match against this tool's specific platform list at the time of the search, not confirmation the username does not exist anywhere.
Note when the search was run and, where available, which version of the tool was used, since an actively maintained project's coverage changes over time.
|
03
What are the pitfalls of a Tookie-OSINT search?
A simple tool trades depth for speed, and a clean result says less than it appears to.
A returned hit mistaken for a confirmed match: a username match alone does not confirm the account belongs to the person under investigation, particularly for a common or generic username. Verifying check: manually review each hit's content before treating it as belonging to the target.
A clean result mistaken for proof of absence: the tool only checks its own specific platform list, which is not exhaustive. Verifying check: treat a no-hit result as inconclusive and cross-check with a second tool before concluding the username is unused elsewhere.
Ease of use mistaken for equivalence with a deeper tool: Tookie-OSINT's simplicity means it does not perform the profile-detail extraction a tool such as Maigret does. Verifying check: use this tool for a fast existence check, and a deeper tool where full profile detail is actually needed.
Chain of custody: a username hit list is only useful evidentially when it is reproducible and independently checked.
Record the exact username searched and the date of the search.
Note which hits were manually verified against the platform directly.
Record whether a second tool corroborated each hit, and if not, flag it as single-source.
Retain only the findings relevant to the active investigation, not the full raw output.
04
Go deeper
The Sherlock and Blackbird guides this pairs with for cross-checking.
GUIDE · GDE-010
Sherlock OSINT: username pivoting beyond WhatsMyName
An independent existence check to corroborate a Tookie-OSINT hit.
GUIDE · GDE-056
Blackbird OSINT: fast username and email search
A comparable fast enumeration tool with its own distinct platform list.
Evidentiary standard
Signal & Shadow operates to the LST-001 evidentiary standard. All claims are graded against the LST-001 v1.0.3 confidence tiers (Confirmed, Corroborated, Reported, Alleged) per the canonical voice and structural specification.
About Signal & Shadow
Signal & Shadow is an independent forensic investigation and methodology practice publishing tutorials, reference cards, and forensic dossiers for working practitioners. Founded by Derek Bowler.