explainx / blog
Maigret builds a dossier from a single username—async checks across thousands of sites, HTML/PDF/graph reports, web UI, Tor/I2P—MIT-licensed Python 3.10+ with an auto-updating site database.
Jul 15, 2026
Elon Musk announced on July 15, 2026 that X will publish its complete codebase — no exceptions — after a security vulnerability review and independent third-party verification that production matches the published source. explainx.ai maps what is already on GitHub, what a full drop would include, reproducible-build caveats, and reactions from security researchers and the agentic-coding crowd.
Jul 13, 2026
Wire tests say Grok Build 0.2.93 uploaded full Git bundles and unredacted secrets. xAI pointed to ZDR and /privacy; Elon Musk pledged to delete all pre-existing uploads. explainx.ai separates proof from promises.
Jul 8, 2026
Anthropic filed a federal trademark suit against cybersecurity vendor Abnormal AI on July 1, 2026. Abnormal's July 7 response says its slash logo dates to 2021 — but the line that broke through on X is different: Abnormal spends >$10M/year on Claude and learned about the lawsuit from a reporter, not Anthropic.
Maigret is a Python-first OSINT utility: feed it a username, and it fans out across a maintained catalog of social and niche sites, collecting public profile signals and packaging them into reports you can hand to an analyst or a ticket. The canonical repo is soxoj/maigret (~23k GitHub stars at the time of writing—refresh the page; the number moves).
This post is a capability overview for blue teams, researchers, and engineers who already think in terms of SOTL-style “find the same handle elsewhere” workflows—not a playbook for abuse.
| Question | Answer |
|---|---|
| One-liner install | Python 3.10+, then pip install maigret → maigret YOUR_USERNAME |
| Scale | README cites 3,000+ sites; default runs skew toward ~500 high-traffic entries unless you pass -a or --tags |
| Outputs | HTML, PDF, XMind-style, JSON/NDJSON, CSV, TXT, --graph D3 graph |
| Web UI | maigret --web <port> or docker run -p 5000:5000 soxoj/maigret:web |
| Stealth / region | Tor, I2P, generic HTTP/SOCKS proxies |
| License | MIT |
Maigret is complementary to manual triage and commercial OSINT suites (the upstream README’s Used by section names several vendors—verify current integrations on their sites). For teams, Maigret is the hackable variant you can script in CI or notebooks.
Profile parsing is powered in part by socid_extractor for structured IDs from public pages.
Site database hygiene. Maigret ships a bundled dataset and can fetch updates from GitHub (README: roughly once per 24 hours when online). Site-specific claimed vs unclaimed test pairs and --self-check exist so maintainers can tame false positives—a chronic issue in any username checker.
Tag and geography filters. --tags photo,dating or --tags us narrow the blast radius when you already know the persona’s likely vertical.
Permutation mode. --permute builds handle variants (e.g. from name parts), useful for typo-squat and alias hunting—also easy to misuse; pair with policy.
Parse a URL. --parse boots a search from an existing profile URL, handy when onboarding from a single IOC.
CLI on an analyst laptop — simplest path for IR retainers.
Docker — soxoj/maigret:latest for batch jobs; soxoj/maigret:web when you want a shared UI on a jump host (bind localhost or put it behind SSO; never expose raw OSINT UIs to the public internet without controls).
Embeddable library — README positions the CLI as a thin wrapper over async APIs you can import; see Read the Docs for library usage and options.
Maigret is neutral tooling. The README’s disclaimer is explicit: lawful, educational use; you own GDPR/CCPA/employment obligations. For employee monitoring or vendor due diligence, run everything through legal and data-retention policy—public does not mean permissionless in every jurisdiction.
False positives still happen: shared usernames, bots, and homoglyphs can implicate the wrong person. Treat hits as leads, not verdicts.
[email protected] (per README)Site counts, Docker tags, and CLI flags change frequently. Treat this article as May 6, 2026 context—read maigret --help and the upstream CHANGELOG before production rollouts.