HandleHawk is a cross-platform username reconnaissance tool for OSINT analysts, CyberSecurity professionnals, Red Teamers, and CTF enthusiasts. It scans multiple social platforms to gather publicly available user information by just a single username input.
"Find the signal in the noise."
HandleHawk/
β
βββ API_KEY/
β βββ twitter_api_key.txt # Optional Twitter API Key file
β
βββ handlehawk.py # Main script
βββ requirements.txt # Python dependencies
βββ README.md # Tool documentation
βββ platforms/ # External platform modules added after tool creation
β βββ __init__.py # Makes platforms a package
β βββ paypal.py # PayPal Module
β βββ hudsonrock.py # Hudson Rock Module
βββ Assets/ # Assets folder
βββ HandleHawk_Logo.png # HandleHawk logo
βββ HandleHawk_small.png # HandleHawk logo (small)
βββ Report_Sample[1].html # HandleHawk report sample
βββ Report_Sample[2].html # HandleHawk report sample
βββ Report_Sample[3].html # HandleHawk report sample
βββ test1.png # Testing platforms before launch
βββ test2.png # Testing platforms before launch
βββ HandleHawk-cyberguy.pdf # Clean PDF report from html
βββ Bluesky_Logo.png
βββ Hudsonrock_Logo.png
βββ Mastodon_Logo.png
βββ Nostr_Logo.png
βββ Paypal_Logo.png
βββ Reddit_Logo.png
βββ Snapchat_Logo.png
βββ Truth-Social_Logo.png
βββ X_Logo.png
| Platform | Logo | Supported |
|---|---|---|
| BlueSky | β | |
| Hudson Rock | β | |
| Mastodon | β | |
| Nostr | β | |
| PayPal | β | |
| β | ||
| Snapchat | β | |
| TruthSocial | β | |
| X (Twitter) | β + API |
- π Scans multiple platforms:
- Bluesky
- Mastodon
- Nostr
- PayPal
- Snapchat
- TruthSocial
- Twitter (via optional RapidAPI)
- π₯·π» Infostealer information from a username with the Hudson Rock module
- π‘οΈ Resilient to Cloudflare thanks to cloudscraper
- π Generates a clean, dark-mode HTML report
- π§ Smart spinner for each check (UX-friendly)
- π Optional Twitter API key (kept local)
- β Supports pagination through all available pages of Nostr search results (up to hundreds of results!)
- π Converts hex-encoded pubkeys to Nostr npub format using Bech32 encoding
- π Generates accurate profile links:
https://nostrapp.link/npub... - π Displays account creation date and time in human-readable format
This allows HandleHawk to return all Nostr profiles that match a username, with rich metadata and clickable profile URLs β not just the first few!
git clone https://github.com/C3n7ral051nt4g3ncy/HandleHawk.git
cd HandleHawk
pip install -r requirements.txtTo enable Twitter checks (via RapidAPI), do the following:
- Create a free account on Rapid API
- Choose the free Twitter API plan (1000 requests per month) by Alexander Vikhorev
- Paste your API key into the file
twitter_api_key.txt - If no key is found, HandleHawk will skip X/Twitter and continue without errors
Run the tool from terminal:
python3 handlehawk.pyHandleHawk.mov
A list of upcoming features and improvements planned for HandleHawk:
- Core recon engine with spinner animations
- Cross-platform username scanning for:
- Mastodon
- Bluesky
- TruthSocial
- Nostr
- Snapchat
- Twitter (X) scanning via optional RapidAPI key
- HTML report generator with profile summaries & images which does more than other username enumeration tools
- Optional
API_KEY/folder for key management - User-agent spoofing & anti-bot headers
- PayPal module added (platforms/paypal.py)
- Extract PayPal full name, currency, and avatar
- Refactored architecture to support modular platform checks
- Improved HTML report with PayPal-specific display logic
- Clean integration of external paypal.py instead of monolithic block
- Hudson Rock module added to pull stealerinfo from a username module added (platforms/hudsonrock.py)
- CSV report export
- JSON output for automation
- Support for more platforms:
- Threads
- Telegram
- YouTube
- GitHub
Developed by C3n7ral051nt4g3ncy
- Open an issue or start a discussion! Contributions and feature ideas are welcome π¦
- If you use HandleHawk in your investigations, feel free to give a βοΈ or suggest a feature!
