Cracken + Maigret
Cracken runs Maigret to build a dossier from one username. It re-runs on the extra identifiers Maigret pulls out of the profile pages it finds.
Connecting Maigret
- Connect with
No credentials — runs on your own Tentacle
- Cadence
Runs on demand — installed on a Tentacle, then invoked during an operation (the agent can install and uninstall it mid-run)
- Requires
A Tentacle running Linux or macOS. Free licence, nothing to purchase and no credentials to supply.
What Cracken gets from Maigret
Per-site hits — the site name and the profile URL where the username was found, across a 3,000+ site database
Fields scraped off each profile page and site API: uid, legacy_id, username, name, created_at, image and background image URLs, bio, location, country, locale, gender, is_verified, follower_count, following_count, board/pin/video counts, and website
Links to the owner's other accounts — facebook_link, instagram_username, twitter_username and similar — which feed a recursive re-search
Site tags (category, country) and keyword-match flags shown as [++]
Reports as HTML, PDF, XMind 8, newline-delimited JSON, an interactive D3 graph, and a Neo4j Cypher script
An optional AI investigation summary: likely real name, location, occupation, interests, languages, confidence and follow-up leads
What Maigret does not do
A default run checks only the 500 highest-ranked sites by traffic, not the full database of 3,000+; the rest has to be asked for. The AI summary needs an OpenAI key Cracken does not supply, so it is off. Sites behind a JavaScript challenge need a separate local service and an opt-in bypass the vendor calls experimental and subject to breaking change.
How Cracken uses Maigret
- 01
Install Maigret on a Tentacle
- 02
Search a username
- 03
Follow the identifiers Maigret extracts
- 04
Confirm the Tentacle is ready
Frequently asked questions
How is Maigret different from a plain username checker?
Beyond checking where a name exists, Maigret parses the profiles it finds for names, bios, and linked accounts, then searches those too.
Does Cracken store Maigret's output as structured findings?
No; the agent reads Maigret's output as raw terminal text while deciding the next command, with no parser turning it into structured findings.
“I've been pretty impressed with how CrackenAGI is able to do its vulnerability discovery, enumeration, reconnaissance, as well as eventually being able to actually execute different exploitation paths.”
Attack with real Maigret context.
See how Cracken runs Maigret on a Tentacle you host, and proves what it finds end to end.