Last updated:

AI Dorks — Social & Footprint

Claude prompts for public social-media footprinting — searching a username across thousands of sites with maigret and correlating which public profiles plausibly share an operator.

Public-source, authorized use. These are prompt-engineering aids, not jailbreaks. Use them on subjects and infrastructure you’re authorized to investigate; they keep to public sources, respect site terms, and exclude breach data and private-individual targeting. Paste a prompt into Claude, fill the highlighted fields, and have it show its work and cite sources.

Map a public username footprint with Claude

These prompts drive real OSINT tooling inside Claude’s sandbox — maigret across thousands of sites, socid-extractor for embedded IDs, and availability sweeps — then correlate which public profiles plausibly belong to the same operator, with evidence and confidence. They keep to public profile existence and flag that identical handles can be different people. Claude can also write Google dorks like site:instagram.com inurl:[handle] to surface public profiles alongside the maigret sweep.

Frequently asked questions

What does the username search cover?

maigret checks a handle against 3,000+ sites; the prompt summarizes hits by category and treats “access denied” results as inconclusive rather than absence.

Is correlating accounts reliable?

It’s probabilistic. The prompt asks Claude to show the corroborating signals (shared IDs, links, bios) and a confidence, and to flag look-alikes it can’t confirm.

Does this touch private accounts?

No — public profile existence only. It does not log in, access closed profiles, or profile private individuals who merely appear in posts.

How do I search a username across all platforms?

The username prompt runs maigret in Claude's sandbox, checking a handle against 3,000+ sites at once and summarizing the hits by category. It treats access-denied results as inconclusive rather than as confirmed absence.

What are good social media OSINT tools?

These prompts drive open-source tools like maigret and socid-extractor for public-profile discovery and cross-account correlation — all on public data, with no logins and no access to closed accounts.

Are there Google dorks for username or social-media OSINT?

Operators like site:instagram.com inurl:[handle] surface public profiles. These prompts pair that with a maigret sweep across 3,000+ sites and cross-account correlation, and Claude can generate the site: and inurl: dorks itself. See the Google Dorks list.