holehe
holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.
Top Related Projects
Quick Overview
Holehe is an open-source tool designed to check if an email address is associated with various online services. It performs asynchronous checks across multiple platforms to determine if an email has been used to create accounts, providing valuable information for OSINT (Open Source Intelligence) investigations and security assessments.
Pros
- Fast and efficient due to asynchronous processing
- Supports a wide range of online services (over 120)
- Provides detailed output, including account existence and additional information when available
- Actively maintained and regularly updated
Cons
- May raise ethical concerns regarding privacy and unauthorized access attempts
- Some services may block or rate-limit requests, affecting accuracy
- Potential for false positives or negatives due to service changes or security measures
- Requires responsible use to avoid legal issues or service disruptions
Code Examples
- Basic usage:
from holehe import core
from holehe.core import *
async def main():
email = "example@example.com"
out = []
await core.launch_module(email, out)
print(out)
asyncio.run(main())
- Using specific modules:
from holehe.modules.social_media import twitter, instagram
async def check_social_media(email):
twitter_result = await twitter.twitter(email, {})
instagram_result = await instagram.instagram(email, {})
return twitter_result, instagram_result
results = asyncio.run(check_social_media("example@example.com"))
print(results)
- Custom output handling:
from holehe import core
from holehe.core import *
async def custom_output(email):
out = []
await core.launch_module(email, out)
for result in out:
if result["exists"]:
print(f"Account found on {result['name']}: {result['rateLimit']}")
asyncio.run(custom_output("example@example.com"))
Getting Started
-
Install holehe:
pip install holehe
-
Basic usage in Python script:
from holehe import core from holehe.core import * import asyncio async def check_email(email): out = [] await core.launch_module(email, out) return out email = "example@example.com" results = asyncio.run(check_email(email)) print(results)
-
Run the script to see the results for the specified email address.
Competitor Comparisons
🕵️♂️ Collect a dossier on a person by username from thousands of sites
Pros of Maigret
- Supports a wider range of platforms (500+) compared to Holehe's focus on email-based services
- Offers more detailed output, including profile information and links
- Provides a command-line interface with various options for customization
Cons of Maigret
- Slower execution due to the larger number of sites checked
- May require more setup and dependencies compared to Holehe's simpler structure
- Potentially higher rate of false positives due to the broader scope
Code Comparison
Holehe:
async def instagram(email):
try:
req = await client.get("https://www.instagram.com/accounts/web_create_ajax/attempt/", headers=headers)
token = req.text.split('{"config":{"csrf_token":"')[1].split('"')[0]
# ... (additional code)
except Exception:
out.append({"name": name,"domain":domain,"method":method,"frequent_rate_limit":frequent_rate_limit,
"rateLimit": True,
"exists": False,
"emailrecovery": None,
"phoneNumber": None,
"others": None})
Maigret:
async def check_username(username):
results = await self.db.ranked_check_services(username, self.db.sites, self.timeout, self.proxy_list)
# ... (additional code)
for sitename, sitereport in results.items():
if sitereport['status'].is_found():
print(f'[+] {sitename}: {sitereport["url_user"]}')
# ... (additional code)
🕵️♂️ Offensive Google framework.
Pros of GHunt
- More comprehensive Google account investigation, including Google Photos and Google Calendar
- Provides detailed information about the target's Google services usage
- Offers a command-line interface for easier automation and integration
Cons of GHunt
- Focused solely on Google services, limiting its scope compared to Holehe's multi-platform approach
- Requires more setup and configuration, including the need for Google cookies
- May be more prone to detection and blocking by Google due to its intensive querying
Code Comparison
Holehe:
async def instagram(email):
try:
req = await client.get("https://www.instagram.com/accounts/web_create_ajax/attempt/", headers=headers)
token = req.cookies['csrftoken']
# ... (additional code)
except Exception:
out.append({"name": name,"domain":domain,"method":method,"frequent_rate_limit":frequent_rate_limit,
"rateLimit": True,
"exists": False,
"emailrecovery": None,
"phoneNumber": None,
"others": None})
GHunt:
def get_account_info(gaiaID):
data = {
"key": gaiaID,
"requestMask": {
"includePrefix": True,
"checkpointMask": {
"includeAbuseStatusCheckpoint": True,
"includeAge": True,
"includeAgeGroup": True,
"includeCountry": True
}
}
}
# ... (additional code)
Snoop — инструмент разведки на основе открытых данных (OSINT world)
Pros of Snoop
- Supports a wider range of platforms and services (400+)
- Includes a graphical user interface (GUI) for easier use
- Offers more detailed reporting options
Cons of Snoop
- Primarily focused on Russian-language services
- Less frequently updated compared to Holehe
Code Comparison
Holehe:
async def instagram(email):
try:
req = await client.get("https://www.instagram.com/accounts/web_create_ajax/attempt/", headers=headers)
token = req.cookies['csrftoken']
# ... (additional code)
except Exception:
out.append({"name": name,"domain":domain,"method":method,"frequent_rate_limit":frequent_rate_limit,
"rateLimit": True,
"exists": False,
"emailrecovery": None,
"phoneNumber": None,
"others": None})
Snoop:
def instagram(username):
url = f"https://www.instagram.com/{username}/"
response = requests.get(url, headers=headers)
if response.status_code == 200:
return f"[+] Instagram: https://instagram.com/{username}"
else:
return f"[-] Instagram: Not Found!"
Both projects aim to gather information about online presence, but Holehe focuses on email-based searches across various platforms, while Snoop primarily checks username availability on different services. Holehe uses asynchronous requests and provides more detailed output, whereas Snoop offers a simpler, synchronous approach with basic availability reporting.
An OSINT tool to search for accounts by username and email in social networks.
Pros of Blackbird
- Supports a wider range of social media platforms and websites
- Offers a graphical user interface (GUI) for easier use
- Provides more detailed output, including profile pictures and additional user information
Cons of Blackbird
- Slower execution time due to more comprehensive checks
- May require additional dependencies for GUI functionality
- Less frequently updated compared to Holehe
Code Comparison
Holehe:
async def instagram(email):
r = await client.get("https://www.instagram.com/accounts/login/")
csrf = r.cookies["csrftoken"]
data = {"email": email, "username": "", "csrf_token": csrf}
r = await client.post("https://www.instagram.com/accounts/web_create_ajax/attempt/", data=data)
return r.json()["status"] == "ok"
Blackbird:
def instagram(email):
headers = {"User-Agent": random.choice(user_agents)}
data = {"email": email, "username": "", "first_name": "", "opt_into_one_tap": "false"}
response = requests.post("https://www.instagram.com/accounts/web_create_ajax/attempt/", headers=headers, data=data)
return "email_is_taken" in response.text
Both projects aim to check email usage across various platforms, but Blackbird offers a more user-friendly experience with its GUI and broader platform coverage. However, Holehe may be more suitable for users prioritizing speed and frequent updates.
Convert designs to code with AI
Introducing Visual Copilot: A new AI model to turn Figma designs to high quality code using your components.
Try Visual CopilotREADME
Holehe OSINT - Email to Registered Accounts
ð Hi there! For any professional inquiries or collaborations, please reach out to me at: megadose@protonmail.com
ð§ Preferably, use your professional email for correspondence. Let's keep it short and sweet, and all in English!
Holehe Online Version
Summary
Efficiently finding registered accounts from emails.
Holehe checks if an email is attached to an account on sites like twitter, instagram, imgur and more than 120 others.
- Retrieves information using the forgotten password function.
- Does not alert the target email.
- Runs on Python 3.
ð ï¸ Installation
With PyPI
pip3 install holehe
With Github
git clone https://github.com/megadose/holehe.git
cd holehe/
python3 setup.py install
With Docker
docker build . -t my-holehe-image
docker run my-holehe-image holehe test@gmail.com
Quick Start
Holehe can be run from the CLI and rapidly embedded within existing python applications.
ð CLI Example
holehe test@gmail.com
ð Python Example
import trio
import httpx
from holehe.modules.social_media.snapchat import snapchat
async def main():
email = "test@gmail.com"
out = []
client = httpx.AsyncClient()
await snapchat(email, client, out)
print(out)
await client.aclose()
trio.run(main)
Module Output
For each module, data is returned in a standard dictionary with the following json-equivalent format :
{
"name": "example",
"rateLimit": false,
"exists": true,
"emailrecovery": "ex****e@gmail.com",
"phoneNumber": "0*******78",
"others": null
}
- rateLitmit : Lets you know if you've been rate-limited.
- exists : If an account exists for the email on that service.
- emailrecovery : Sometimes partially obfuscated recovery emails are returned.
- phoneNumber : Sometimes partially obfuscated recovery phone numbers are returned.
- others : Any extra info.
Rate limit? Change your IP.
Maltego Transform : Holehe Maltego
Thank you to :
Donations
For BTC Donations : 1FHDM49QfZX6pJmhjLE5tB2K6CaTLMZpXZ
ð License
GNU General Public License v3.0
Built for educational purposes only.
Modules
Name | Domain | Method | Frequent Rate Limit |
---|---|---|---|
aboutme | about.me | register | â |
adobe | adobe.com | password recovery | â |
amazon | amazon.com | login | â |
amocrm | amocrm.com | register | â |
anydo | any.do | login | â |
archive | archive.org | register | â |
armurerieauxerre | armurerie-auxerre.com | register | â |
atlassian | atlassian.com | register | â |
axonaut | axonaut.com | register | â |
babeshows | babeshows.co.uk | register | â |
badeggsonline | badeggsonline.com | register | â |
biosmods | bios-mods.com | register | â |
biotechnologyforums | biotechnologyforums.com | register | â |
bitmoji | bitmoji.com | login | â |
blablacar | blablacar.com | register | â |
blackworldforum | blackworldforum.com | register | â |
blip | blip.fm | register | â |
blitzortung | forum.blitzortung.org | register | â |
bluegrassrivals | bluegrassrivals.com | register | â |
bodybuilding | bodybuilding.com | register | â |
buymeacoffee | buymeacoffee.com | register | â |
cambridgemt | discussion.cambridge-mt.com | register | â |
caringbridge | caringbridge.org | register | â |
chinaphonearena | chinaphonearena.com | register | â |
clashfarmer | clashfarmer.com | register | â |
codecademy | codecademy.com | register | â |
codeigniter | forum.codeigniter.com | register | â |
codepen | codepen.io | register | â |
coroflot | coroflot.com | register | â |
cpaelites | cpaelites.com | register | â |
cpahero | cpahero.com | register | â |
cracked_to | cracked.to | register | â |
crevado | crevado.com | register | â |
deliveroo | deliveroo.com | register | â |
demonforums | demonforums.net | register | â |
devrant | devrant.com | register | â |
diigo | diigo.com | register | â |
discord | discord.com | register | â |
docker | docker.com | register | â |
dominosfr | dominos.fr | register | â |
ebay | ebay.com | login | â |
ello | ello.co | register | â |
envato | envato.com | register | â |
eventbrite | eventbrite.com | login | â |
evernote | evernote.com | login | â |
fanpop | fanpop.com | register | â |
firefox | firefox.com | register | â |
flickr | flickr.com | login | â |
freelancer | freelancer.com | register | â |
freiberg | drachenhort.user.stunet.tu-freiberg.de | register | â |
garmin | garmin.com | register | â |
github | github.com | register | â |
google.com | register | â | |
gravatar | gravatar.com | other | â |
hubspot | hubspot.com | login | â |
imgur | imgur.com | register | â |
insightly | insightly.com | login | â |
instagram.com | register | â | |
issuu | issuu.com | register | â |
koditv | forum.kodi.tv | register | â |
komoot | komoot.com | register | â |
laposte | laposte.fr | register | â |
lastfm | last.fm | register | â |
lastpass | lastpass.com | register | â |
mail_ru | mail.ru | password recovery | â |
mybb | community.mybb.com | register | â |
myspace | myspace.com | register | â |
nattyornot | nattyornotforum.nattyornot.com | register | â |
naturabuy | naturabuy.fr | register | â |
ndemiccreations | forum.ndemiccreations.com | register | â |
nextpvr | forums.nextpvr.com | register | â |
nike | nike.com | register | â |
nimble | nimble.com | register | â |
nocrm | nocrm.io | register | â |
nutshell | nutshell.com | register | â |
odnoklassniki | ok.ru | password recovery | â |
office365 | office365.com | other | â |
onlinesequencer | onlinesequencer.net | register | â |
parler | parler.com | login | â |
patreon | patreon.com | login | â |
pinterest.com | register | â | |
pipedrive | pipedrive.com | register | â |
plurk | plurk.com | register | â |
pornhub | pornhub.com | register | â |
protonmail | protonmail.ch | other | â |
quora | quora.com | register | â |
rambler | rambler.ru | register | â |
redtube | redtube.com | register | â |
replit | replit.com | register | â |
rocketreach | rocketreach.co | register | â |
samsung | samsung.com | register | â |
seoclerks | seoclerks.com | register | â |
sevencups | 7cups.com | register | â |
smule | smule.com | register | â |
snapchat | snapchat.com | login | â |
soundcloud | soundcloud.com | register | â |
sporcle | sporcle.com | register | â |
spotify | spotify.com | register | â |
strava | strava.com | register | â |
taringa | taringa.net | register | â |
teamleader | teamleader.com | register | â |
teamtreehouse | teamtreehouse.com | register | â |
tellonym | tellonym.me | register | â |
thecardboard | thecardboard.org | register | â |
therianguide | forums.therian-guide.com | register | â |
thevapingforum | thevapingforum.com | register | â |
tumblr | tumblr.com | register | â |
tunefind | tunefind.com | register | â |
twitter.com | register | â | |
venmo | venmo.com | register | â |
vivino | vivino.com | register | â |
voxmedia | voxmedia.com | register | â |
vrbo | vrbo.com | register | â |
vsco | vsco.co | register | â |
wattpad | wattpad.com | register | â |
wordpress | wordpress | login | â |
xing.com | register | â | |
xnxx | xnxx.com | register | â |
xvideos | xvideos.com | register | â |
yahoo | yahoo.com | login | â |
zoho | zoho.com | login | â |
Top Related Projects
Convert designs to code with AI
Introducing Visual Copilot: A new AI model to turn Figma designs to high quality code using your components.
Try Visual Copilot