user-scanner 1.1.0.2__tar.gz → 1.1.0.3__tar.gz

{user_scanner-1.1.0.2 → user_scanner-1.1.0.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: user-scanner
-Version: 1.1.0.2
+Version: 1.1.0.3
 Summary: Check username availability across multiple popular platforms
 Keywords: username,checker,availability,social,tech,python,user-scanner
 Author-email: Kaif <kafcodec@gmail.com>
@@ -16,7 +16,7 @@ Project-URL: Homepage, https://github.com/kaifcodec/user-scanner
 
 ![User Scanner Logo](https://github.com/user-attachments/assets/49ec8d24-665b-4115-8525-01a8d0ca2ef4)
 <p align="center">
-  <img src="https://img.shields.io/badge/Version-1.1.0.2-blueviolet?style=for-the-badge&logo=github" />
+  <img src="https://img.shields.io/badge/Version-1.1.0.3-blueviolet?style=for-the-badge&logo=github" />
   <img src="https://img.shields.io/github/issues/kaifcodec/user-scanner?style=for-the-badge&logo=github" />
   <img src="https://img.shields.io/badge/Tested%20on-Termux-black?style=for-the-badge&logo=termux" />
   <img src="https://img.shields.io/badge/Tested%20on-Windows-cyan?style=for-the-badge&logo=Windows" />
@@ -52,12 +52,28 @@ Perfect for finding a **unique username** across GitHub, Twitter, Reddit, Instag
 - ✅ **Bulk email scanning** from file support for checking multiple emails at once
 ---
 
-## Installation
+## Virtual Environment (optional but recommended)
 
 ```bash
-pip install user-scanner
+# create venv
+python -m venv .venv
+````
+## Activate venv
+```bash
+# Linux / macOS
+source .venv/bin/activate
+
+# Windows (PowerShell)
+.venv\Scripts\Activate.ps1
 ```
+## Installation
+```bash
+# upgrade pip
+python -m pip install --upgrade pip
 
+# install
+pip install user-scanner
+```
 ---
 
 ## Important Flags
@@ -167,9 +183,11 @@ user-scanner -U
 
 - Note*: New modules are constantly getting added so this might have only limited, outdated output:
 
-<img width="1072" height="848" alt="user-scanner's main usage screenshot" src="https://github.com/user-attachments/assets/34e44ca6-e314-419e-9035-d951b493b47f" />
+<img width="1080" height="656" alt="1000146096" src="https://github.com/user-attachments/assets/1101e2f8-18ea-45a4-9492-92e237ecc670" />
 
+---
 
+<img width="1072" height="848" alt="user-scanner's main usage screenshot" src="https://github.com/user-attachments/assets/34e44ca6-e314-419e-9035-d951b493b47f" />
 
 ---
 
@@ -222,6 +240,16 @@ See [CONTRIBUTING.md](CONTRIBUTING.md) for examples.
 
 This project is licensed under the **MIT License**. See [LICENSE](LICENSE) for details.
 
+---
+
+## ⚠️ Disclaimer
+
+This tool is provided for **educational purposes** and **authorized security research** only.
+
+- **User Responsibility:** Users are solely responsible for ensuring their usage complies with all applicable laws and the Terms of Service (ToS) of any third-party providers.
+- **Methodology:** The tool interacts only with **publicly accessible, unauthenticated web endpoints**. It does not bypass authentication, security controls, or access private user data.
+- **No Profiling:** This software performs only basic **yes/no availability checks**. It does not collect, store, aggregate, or analyze user data, behavior, or identities.
+- **Limitation of Liability:** The software is provided **“as is”**, without warranty of any kind. The developers assume no liability for misuse or any resulting damage or legal consequences.
 
 ---
 

{user_scanner-1.1.0.2 → user_scanner-1.1.0.3}/README.md

@@ -2,7 +2,7 @@
 
 ![User Scanner Logo](https://github.com/user-attachments/assets/49ec8d24-665b-4115-8525-01a8d0ca2ef4)
 <p align="center">
-  <img src="https://img.shields.io/badge/Version-1.1.0.2-blueviolet?style=for-the-badge&logo=github" />
+  <img src="https://img.shields.io/badge/Version-1.1.0.3-blueviolet?style=for-the-badge&logo=github" />
   <img src="https://img.shields.io/github/issues/kaifcodec/user-scanner?style=for-the-badge&logo=github" />
   <img src="https://img.shields.io/badge/Tested%20on-Termux-black?style=for-the-badge&logo=termux" />
   <img src="https://img.shields.io/badge/Tested%20on-Windows-cyan?style=for-the-badge&logo=Windows" />
@@ -38,12 +38,28 @@ Perfect for finding a **unique username** across GitHub, Twitter, Reddit, Instag
 - ✅ **Bulk email scanning** from file support for checking multiple emails at once
 ---
 
-## Installation
+## Virtual Environment (optional but recommended)
 
 ```bash
-pip install user-scanner
+# create venv
+python -m venv .venv
+````
+## Activate venv
+```bash
+# Linux / macOS
+source .venv/bin/activate
+
+# Windows (PowerShell)
+.venv\Scripts\Activate.ps1
 ```
+## Installation
+```bash
+# upgrade pip
+python -m pip install --upgrade pip
 
+# install
+pip install user-scanner
+```
 ---
 
 ## Important Flags
@@ -153,9 +169,11 @@ user-scanner -U
 
 - Note*: New modules are constantly getting added so this might have only limited, outdated output:
 
-<img width="1072" height="848" alt="user-scanner's main usage screenshot" src="https://github.com/user-attachments/assets/34e44ca6-e314-419e-9035-d951b493b47f" />
+<img width="1080" height="656" alt="1000146096" src="https://github.com/user-attachments/assets/1101e2f8-18ea-45a4-9492-92e237ecc670" />
 
+---
 
+<img width="1072" height="848" alt="user-scanner's main usage screenshot" src="https://github.com/user-attachments/assets/34e44ca6-e314-419e-9035-d951b493b47f" />
 
 ---
 
@@ -208,6 +226,16 @@ See [CONTRIBUTING.md](CONTRIBUTING.md) for examples.
 
 This project is licensed under the **MIT License**. See [LICENSE](LICENSE) for details.
 
+---
+
+## ⚠️ Disclaimer
+
+This tool is provided for **educational purposes** and **authorized security research** only.
+
+- **User Responsibility:** Users are solely responsible for ensuring their usage complies with all applicable laws and the Terms of Service (ToS) of any third-party providers.
+- **Methodology:** The tool interacts only with **publicly accessible, unauthenticated web endpoints**. It does not bypass authentication, security controls, or access private user data.
+- **No Profiling:** This software performs only basic **yes/no availability checks**. It does not collect, store, aggregate, or analyze user data, behavior, or identities.
+- **Limitation of Liability:** The software is provided **“as is”**, without warranty of any kind. The developers assume no liability for misuse or any resulting damage or legal consequences.
 
 ---
 

{user_scanner-1.1.0.2 → user_scanner-1.1.0.3}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "flit_core.buildapi"
 
 [project]
 name = "user-scanner"
-version = "1.1.0.2"
+version = "1.1.0.3"
 description = "Check username availability across multiple popular platforms"
 readme = "README.md"
 license = {file = "LICENSE"}

user_scanner-1.1.0.3/user_scanner/config.json

@@ -0,0 +1,3 @@
+{
+  "auto_update_status": true
+}

user_scanner-1.1.0.3/user_scanner/email_scan/community/.ruff_cache/.gitignore

@@ -0,0 +1,2 @@
+# Automatically created by ruff.
+*

user_scanner-1.1.0.3/user_scanner/email_scan/community/.ruff_cache/CACHEDIR.TAG

@@ -0,0 +1 @@
+Signature: 8a477f597d28d172789f06886806bc55

user_scanner-1.1.0.3/user_scanner/email_scan/community/quora.py

@@ -0,0 +1,112 @@
+import asyncio
+import json
+import re
+import os
+import shutil
+from user_scanner.core.result import Result
+
+
+async def _check(email: str) -> Result:
+    if not shutil.which("curl"):
+        return Result.error("curl is not installed, install it to use Quora validation")
+
+    cookie_path = f"quora_cookie_{os.getpid()}.txt"
+    base_url = "https://www.quora.com/"
+    gql_url = "https://www.quora.com/graphql/gql_para_POST"
+
+    headers = {
+        'host': 'www.quora.com',
+        'sec-ch-ua': '"Not(A:Brand";v="8", "Chromium";v="144", "Google Chrome";v="144"',
+        'sec-ch-ua-mobile': '?1',
+        'sec-ch-ua-platform': '"Android"',
+        'upgrade-insecure-requests': '1',
+        'user-agent': 'Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Mobile Safari/537.36',
+        'accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8',
+        'referer': 'https://www.google.com/',
+        'accept-language': 'en-US,en;q=0.9',
+    }
+
+    async def run_curl(url, current_headers, post_data=None, url_params=None):
+        cmd = ["curl", "-s", "-k", "-L", "--http2", "--max-time",
+               "5", "-c", cookie_path, "-b", cookie_path]
+        for k, v in current_headers.items():
+            cmd.extend(["-H", f"{k}: {v}"])
+        if url_params:
+            import urllib.parse
+            url += "?" + urllib.parse.urlencode(url_params)
+        if post_data:
+            cmd.extend(["-X", "POST", "--data-raw", json.dumps(post_data)])
+        cmd.append(url)
+
+        process = await asyncio.create_subprocess_exec(
+            *cmd, stdout=asyncio.subprocess.PIPE, stderr=asyncio.subprocess.PIPE
+        )
+        try:
+            stdout, _ = await asyncio.wait_for(process.communicate(), timeout=5)
+            return stdout.decode('utf-8', errors='ignore')
+        except asyncio.TimeoutError:
+            try:
+                process.kill()
+            except Exception:
+                pass
+            return ""
+
+    try:
+        html = await run_curl(base_url, headers)
+        if not html:
+            if os.path.exists(cookie_path):
+                os.remove(cookie_path)
+            return Result.error("Connection timed out")
+
+        formkey_match = re.search(r'\"formkey\":\s*\"([a-f0-9]{32})\"', html)
+        if not formkey_match:
+            if os.path.exists(cookie_path):
+                os.remove(cookie_path)
+            return Result.error("Quora blocked the request (Bot detection/403)")
+
+        formkey = formkey_match.group(1)
+
+        gql_headers = headers.copy()
+        gql_headers.update({
+            'content-type': 'application/json',
+            'quora-formkey': formkey,
+            'quora-canary-revision': 'false',
+            'origin': 'https://www.quora.com',
+            'referer': 'https://www.quora.com/',
+            'priority': 'u=1, i'
+        })
+
+        payload = {
+            "queryName": "SignupEmailForm_validateEmail_Query",
+            "variables": {"email": email},
+            "extensions": {
+                "hash": "1db80096407be846d5581fe1b42b12fd05e0b40a5d3095ed40a0b4bd28f49fe7"
+            }
+        }
+
+        response_text = await run_curl(gql_url, gql_headers, post_data=payload, url_params={'q': "SignupEmailForm_validateEmail_Query"})
+
+        if os.path.exists(cookie_path):
+            os.remove(cookie_path)
+
+        if not response_text.strip():
+            return Result.error("Quora timed out or returned empty body")
+
+        data = json.loads(response_text)
+        status = data.get("data", {}).get("validateEmail")
+
+        if status == "IN_USE":
+            return Result.taken()
+        elif status == "OK":
+            return Result.available()
+        else:
+            return Result.error(f"Unexpected status: {status}")
+
+    except Exception as e:
+        if os.path.exists(cookie_path):
+            os.remove(cookie_path)
+        return Result.error(e)
+
+
+async def validate_quora(email: str) -> Result:
+    return await _check(email)

user_scanner-1.1.0.3/user_scanner/email_scan/dev/.ruff_cache/.gitignore

@@ -0,0 +1,2 @@
+# Automatically created by ruff.
+*

user_scanner-1.1.0.3/user_scanner/email_scan/dev/.ruff_cache/CACHEDIR.TAG

@@ -0,0 +1 @@
+Signature: 8a477f597d28d172789f06886806bc55

{user_scanner-1.1.0.2 → user_scanner-1.1.0.3}/user_scanner/email_scan/dev/bitbucket.py

@@ -1,6 +1,7 @@
 import httpx
 from user_scanner.core.result import Result
 
+
 async def _check(email: str) -> Result:
     async with httpx.AsyncClient(http2=True) as client:
         try:
@@ -29,5 +30,6 @@ async def _check(email: str) -> Result:
         except Exception as e:
             return Result.error(f"Unexpected exception:{e}")
 
+
 async def validate_bitbucket(email: str) -> Result:
     return await _check(email)

user_scanner-1.1.0.3/user_scanner/email_scan/dev/codecademy.py

@@ -0,0 +1,49 @@
+import httpx
+import re
+from user_scanner.core.result import Result
+
+
+async def _check(email: str) -> Result:
+    headers = {
+        'User-Agent': "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36",
+        'Accept': 'application/json',
+        'Accept-Language': 'en-US,en;q=0.9',
+        'Referer': 'https://www.codecademy.com/register?redirect=%2F',
+        'Content-Type': 'application/json',
+        'Origin': 'https://www.codecademy.com',
+    }
+
+    try:
+        async with httpx.AsyncClient(timeout=4.0, follow_redirects=True) as client:
+            init_res = await client.get("https://www.codecademy.com/register", headers=headers)
+
+            csrf_match = re.search(
+                r'name="csrf-token" content="([^"]+)"', init_res.text)
+            if not csrf_match:
+                return Result.error("Could not find CSRF token")
+
+            headers["X-CSRF-Token"] = csrf_match.group(1)
+
+            payload = {"user": {"email": email}}
+
+            response = await client.post(
+                'https://www.codecademy.com/register/validate',
+                headers=headers,
+                json=payload
+            )
+
+            if response.status_code == 400 and 'has already been taken' in response.text:
+                return Result.taken()
+            elif response.status_code == 200:
+                return Result.available()
+
+            return Result.error(f"Unexpected response: {response.status_code}")
+
+    except httpx.TimeoutException:
+        return Result.error("Connection timed out")
+    except Exception as e:
+        return Result.error(str(e))
+
+
+async def validate_codecademy(email: str) -> Result:
+    return await _check(email)

user_scanner-1.1.0.3/user_scanner/email_scan/dev/codepen.py

@@ -0,0 +1,54 @@
+import httpx
+import re
+from user_scanner.core.result import Result
+
+
+async def _check(email: str) -> Result:
+    headers = {
+        'User-Agent': "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36",
+        'Accept': '*/*',
+        'Accept-Language': 'en-US,en;q=0.9',
+        'Referer': 'https://codepen.io/accounts/signup/user/free',
+        'Content-Type': 'application/x-www-form-urlencoded; charset=UTF-8',
+        'X-Requested-With': 'XMLHttpRequest',
+        'Origin': 'https://codepen.io',
+    }
+
+    try:
+        async with httpx.AsyncClient(timeout=10.0, follow_redirects=True) as client:
+            init_res = await client.get("https://codepen.io/accounts/signup/user/free", headers=headers)
+
+            csrf_match = re.search(
+                r'name="csrf-token" content="([^"]+)"', init_res.text)
+            if not csrf_match:
+                return Result.error("Could not find CSRF token")
+
+            headers["X-CSRF-Token"] = csrf_match.group(1)
+
+            payload = {
+                'attribute': 'email',
+                'value': email,
+                'context': 'user'
+            }
+
+            response = await client.post(
+                'https://codepen.io/accounts/duplicate_check',
+                headers=headers,
+                data=payload
+            )
+
+            if "That Email is already taken." in response.text:
+                return Result.taken()
+            elif response.status_code == 200:
+                return Result.available()
+
+            return Result.error(f"Unexpected response: {response.status_code}")
+
+    except httpx.TimeoutException:
+        return Result.error("Connection timed out")
+    except Exception as e:
+        return Result.error(str(e))
+
+
+async def validate_codepen(email: str) -> Result:
+    return await _check(email)

user_scanner-1.1.0.3/user_scanner/email_scan/dev/devrant.py

@@ -0,0 +1,49 @@
+import httpx
+from user_scanner.core.result import Result
+
+
+async def _check(email: str) -> Result:
+    headers = {
+        'User-Agent': "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36",
+        'Accept': 'application/json, text/javascript, */*; q=0.01',
+        'Content-Type': 'application/x-www-form-urlencoded; charset=UTF-8',
+        'X-Requested-With': 'XMLHttpRequest',
+        'Origin': 'https://devrant.com',
+        'Referer': 'https://devrant.com/feed/top/month?login=1',
+    }
+
+    payload = {
+        'app': '3',
+        'type': '1',
+        'email': email,
+        'username': '',
+        'password': '',
+        'guid': '',
+        'plat': '3',
+        'sid': '',
+        'seid': ''
+    }
+
+    try:
+        async with httpx.AsyncClient(timeout=10.0) as client:
+            response = await client.post('https://devrant.com/api/users', headers=headers, data=payload)
+
+            if response.status_code != 200:
+                return Result.error(f"Unexpected status code: {response.status_code}")
+
+            data = response.json()
+            error_msg = data.get('error', '')
+
+            if error_msg == 'The email specified is already registered to an account.':
+                return Result.taken()
+
+            return Result.available()
+
+    except httpx.TimeoutException:
+        return Result.error("Connection timed out")
+    except Exception as e:
+        return Result.error(str(e))
+
+
+async def validate_devrant(email: str) -> Result:
+    return await _check(email)

{user_scanner-1.1.0.2 → user_scanner-1.1.0.3}/user_scanner/email_scan/dev/github.py

@@ -2,6 +2,7 @@ import httpx
 import re
 from user_scanner.core.result import Result
 
+
 async def _check(email: str) -> Result:
     async with httpx.AsyncClient(http2=True, follow_redirects=True) as client:
         try:
@@ -68,5 +69,6 @@ async def _check(email: str) -> Result:
         except Exception as e:
             return Result.error(f"unexpected exception: {e}")
 
+
 async def validate_github(email: str) -> Result:
     return await _check(email)

user_scanner-1.1.0.3/user_scanner/email_scan/dev/wordpress.py

@@ -0,0 +1,52 @@
+import httpx
+from user_scanner.core.result import Result
+
+
+async def _check(email: str) -> Result:
+    url = f"https://public-api.wordpress.com/rest/v1.1/users/{email}/auth-options"
+
+    params = {
+        'http_envelope': "1"
+    }
+
+    headers = {
+        'User-Agent': "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36",
+        'Accept': "application/json",
+        'sec-ch-ua-platform': '"Linux"',
+        'sec-ch-ua': '"Not(A:Brand";v="8", "Chromium";v="144", "Google Chrome";v="144"',
+        'sec-ch-ua-mobile': "?0",
+        'sec-fetch-site': "same-origin",
+        'sec-fetch-mode': "cors",
+        'sec-fetch-dest': "empty",
+        'referer': "https://public-api.wordpress.com/wp-admin/rest-proxy/?v=2.0",
+        'accept-language': "en-US,en;q=0.9",
+    }
+
+    try:
+        async with httpx.AsyncClient(timeout=5.0) as client:
+            response = await client.get(url, params=params, headers=headers)
+
+            if response.status_code != 200:
+                return Result.error(f"WordPress API returned status {response.status_code}")
+
+            data = response.json()
+
+            inner_code = data.get("code")
+            body = data.get("body", {})
+
+            if inner_code == 200:
+                return Result.taken()
+            elif inner_code == 404 and body.get("error") == "unknown_user":
+                return Result.available()
+            else:
+                error_msg = body.get("message", "Unknown API response")
+                return Result.error(f"WordPress Error: {error_msg}")
+
+    except httpx.TimeoutException:
+        return Result.error("Connection timed out")
+    except Exception as e:
+        return Result.error(str(e))
+
+
+async def validate_wordpress(email: str) -> Result:
+    return await _check(email)

user_scanner-1.1.0.3/user_scanner/email_scan/hosting/.ruff_cache/.gitignore

@@ -0,0 +1,2 @@
+# Automatically created by ruff.
+*

user_scanner-1.1.0.3/user_scanner/email_scan/hosting/.ruff_cache/CACHEDIR.TAG

@@ -0,0 +1 @@
+Signature: 8a477f597d28d172789f06886806bc55

user_scanner-1.1.0.3/user_scanner/email_scan/hosting/render.py

@@ -0,0 +1,60 @@
+import httpx
+from user_scanner.core.result import Result
+
+async def _check(email: str) -> Result:
+    url = "https://api.render.com/graphql"
+    
+    payload = {
+        "operationName": "signUp",
+        "variables": {
+            "signup": {
+                "email": email,
+                "githubId": "",
+                "name": "",
+                "githubToken": "",
+                "googleId": "",
+                "gitlabId": "",
+                "bitbucketId": "",
+                "inviteCode": "",
+                "password": "StandardPassword123!",
+                "newsletterOptIn": False,
+                "next": ""
+            }
+        },
+        "query": "mutation signUp($signup: SignupInput!) {\n  signUp(signup: $signup) {\n    idToken\n    __typename\n  }\n}\n"
+    }
+
+    headers = {
+        "User-Agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36",
+        "Content-Type": "application/json",
+        "origin": "https://dashboard.render.com",
+        "referer": "https://dashboard.render.com/register",
+        "accept-language": "en-US,en;q=0.9"
+    }
+
+    async with httpx.AsyncClient(http2=True, timeout=4.0) as client:
+        try:
+            response = await client.post(url, json=payload, headers=headers)
+
+            if response.status_code == 429:
+                return Result.error("Rate limited, use '-d' flag to avoid bot detection")
+
+            data = response.json()
+            errors = data.get("errors", [])
+
+            if errors:
+                msg = errors[0].get("message", "")
+                if '"email":"exists"' in msg:
+                    return Result.taken()
+                elif '"hcaptcha_token":"invalid"' in msg:
+                    return Result.available()
+                else:
+                    return Result.error(f"Render Error: {msg}")
+
+            return Result.error("Unexpected error, report it via GitHub issues")
+
+        except Exception as e:
+            return Result.error(e)
+
+async def validate_render(email: str) -> Result:
+    return await _check(email)

user_scanner-1.1.0.3/user_scanner/email_scan/music/.ruff_cache/.gitignore

@@ -0,0 +1,2 @@
+# Automatically created by ruff.
+*

user_scanner-1.1.0.3/user_scanner/email_scan/music/.ruff_cache/CACHEDIR.TAG

@@ -0,0 +1 @@
+Signature: 8a477f597d28d172789f06886806bc55