Top Related Projects
Hunt down social media accounts by username across social networks
Stalk your Friends. Find their Instagram, FB and Twitter Profiles using Image Recognition and Reverse Image Search.
🕵️♂️ Collect a dossier on a person by username from thousands of sites
API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites
holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.
Snoop — инструмент разведки на основе открытых данных (OSINT world)
Quick Overview
GHunt is an open-source tool that allows users to gather information about a Google account, including the owner's name, email addresses, phone numbers, and other personal details. It is designed to be a comprehensive reconnaissance tool for security researchers, investigators, and others who need to gather intelligence on Google accounts.
Pros
- Comprehensive Information Gathering: GHunt can gather a wide range of information about a Google account, including personal details, social media profiles, and more.
- Automated Workflow: The tool automates many of the manual steps involved in gathering information about a Google account, making the process more efficient.
- Open-Source and Customizable: GHunt is an open-source project, allowing users to customize and extend the tool to fit their specific needs.
- Active Development and Community: The project has an active community of contributors and is regularly updated with new features and improvements.
Cons
- Potential Privacy Concerns: While GHunt is a useful tool for security research and investigation, it could also be used to invade the privacy of individuals, which raises ethical concerns.
- Reliance on Google APIs: GHunt relies on Google's APIs to gather information, which means that changes to these APIs could potentially break the tool's functionality.
- Potential for Abuse: Like any powerful tool, GHunt could be misused by bad actors to harass or target individuals, which is a concern that users should be aware of.
- Limited Scope: While GHunt is a comprehensive tool, it is focused specifically on gathering information about Google accounts and may not be suitable for broader intelligence gathering tasks.
Getting Started
To get started with GHunt, you'll need to follow these steps:
- Clone the repository from GitHub:
git clone https://github.com/mxrch/GHunt.git
- Install the required dependencies:
cd GHunt
pip install -r requirements.txt
-
Obtain the necessary Google API credentials:
- Go to the Google Cloud Console and create a new project.
- Enable the Google People API and Google Custom Search API for your project.
- Create a new OAuth client ID and download the client secret JSON file.
-
Configure GHunt with your Google API credentials:
python ghunt.py --config
- Run GHunt to gather information about a Google account:
python ghunt.py -e <email_address>
This will initiate the information gathering process and display the results in the console.
Competitor Comparisons
Hunt down social media accounts by username across social networks
Pros of Sherlock
- Broader scope: Searches for usernames across 300+ websites
- Active community with frequent updates and contributions
- Supports command-line arguments for customization
Cons of Sherlock
- Less focused on specific platforms (e.g., Google services)
- May produce false positives due to the large number of sites checked
- Requires more setup and dependencies
Code Comparison
Sherlock (Python):
def sherlock(username):
for site in sites:
url = site['url'].format(username)
response = requests.get(url)
if response.status_code == 200:
print(f"Found on {site['name']}")
GHunt (Python):
def ghunt(email):
gaia_id = get_gaia_id(email)
if gaia_id:
profile = get_google_profile(gaia_id)
print(f"Google Profile: {profile}")
Key Differences
- Sherlock focuses on username searches across multiple platforms
- GHunt specializes in Google account information retrieval
- Sherlock is more suitable for general OSINT, while GHunt is tailored for Google-specific investigations
- GHunt provides more detailed information about Google accounts, including profile data and linked services
- Sherlock's results are typically limited to account existence, while GHunt can extract additional user details
Stalk your Friends. Find their Instagram, FB and Twitter Profiles using Image Recognition and Reverse Image Search.
Pros of EagleEye
- Supports multiple social media platforms (Facebook, Instagram, Twitter, etc.)
- Provides facial recognition capabilities for cross-platform searching
- Offers a more comprehensive approach to social media OSINT
Cons of EagleEye
- Less focused on Google-specific data extraction
- May require more setup and dependencies due to its broader scope
- Potentially slower processing time due to multi-platform analysis
Code Comparison
EagleEye:
def get_social_media_profiles(name):
profiles = []
for platform in SUPPORTED_PLATFORMS:
profile = platform.search(name)
if profile:
profiles.append(profile)
return profiles
GHunt:
def get_google_account_info(email):
account_info = {}
account_info['name'] = get_name(email)
account_info['profile_pic'] = get_profile_pic(email)
account_info['last_seen'] = get_last_seen(email)
return account_info
EagleEye offers a broader approach to social media intelligence gathering, supporting multiple platforms and utilizing facial recognition. However, it may be less efficient for Google-specific data extraction compared to GHunt. GHunt focuses specifically on Google account information, potentially providing more detailed and targeted results for Google-related OSINT. The code comparison illustrates EagleEye's multi-platform approach versus GHunt's Google-centric functionality.
🕵️♂️ Collect a dossier on a person by username from thousands of sites
Pros of Maigret
- Supports a wider range of platforms and services (500+) for OSINT
- Offers more detailed output and reporting options
- Actively maintained with frequent updates
Cons of Maigret
- May require more setup and dependencies
- Can be slower due to the large number of services it checks
- Less focused on Google-specific information
Code Comparison
GHunt (Python):
def get_gaia_id(email):
res = requests.get(f"https://people-pa.googleapis.com/_/lookup/lookup?email={email}")
data = json.loads(res.text.replace(")]}'\n\n", ""))
return data[0][0][2]
Maigret (Python):
async def check_username(username, site):
url = site['check_uri'].format(username=username)
response = await self.request(url=url, method=site.get('method', 'GET'))
return self.check_response_valid(response, site)
Both projects use Python for their core functionality, but GHunt focuses on Google-specific APIs, while Maigret implements a more generic approach for checking usernames across various platforms.
API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites
Pros of social-analyzer
- Supports a wider range of social media platforms (300+)
- Provides a web interface for easier use
- Offers both CLI and API options for integration
Cons of social-analyzer
- Less focused on Google-specific data
- May require more setup and dependencies
- Potentially slower due to broader scope
Code Comparison
social-analyzer:
def check_user(username, sites='all', output='pretty', filter='all', timeout=10, method='all'):
# Implementation for checking user across multiple platforms
GHunt:
def hunt(email):
# Implementation for gathering Google account information
Key Differences
GHunt focuses specifically on Google account information, while social-analyzer covers a broader range of social media platforms. GHunt is more specialized and potentially more in-depth for Google-related data, whereas social-analyzer offers a wider scope but may sacrifice some depth for breadth.
GHunt is primarily a command-line tool, while social-analyzer provides both CLI and web interface options. This makes social-analyzer potentially more accessible to non-technical users.
Both tools serve similar purposes in OSINT (Open Source Intelligence) gathering, but their approaches and target platforms differ significantly. The choice between them would depend on the specific requirements of the investigation and the platforms of interest.
holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.
Pros of holehe
- Supports a wider range of websites and services (over 120)
- Faster execution due to asynchronous requests
- Lightweight and easy to install with pip
Cons of holehe
- Limited to email-based searches
- Less detailed information compared to GHunt's comprehensive Google account data
- May trigger security alerts on some services due to rapid requests
Code Comparison
holehe:
async def instagram(email):
try:
async with aiohttp.ClientSession() as session:
async with session.get("https://www.instagram.com/accounts/web_create_ajax/attempt/", timeout=10) as response:
if response.status == 200:
return {"exists": True, "emailrecovery": None, "phoneNumber": None, "others": None}
except Exception:
pass
return False
GHunt:
def get_account_info(gaiaID):
url = f"https://people-pa.googleapis.com/v2/people/{gaiaID}?personFields=metadata,photos,names,emailAddresses,phoneNumbers,addresses,birthdays,genders,occupations"
headers = {"X-Goog-Api-Key": API_KEY}
req = requests.get(url, headers=headers)
data = json.loads(req.text)
return data
The code snippets show different approaches: holehe focuses on individual service checks, while GHunt leverages Google's API for comprehensive account information.
Snoop — инструмент разведки на основе открытых данных (OSINT world)
Pros of snoop
- Supports a wider range of social networks and websites (400+)
- Provides more detailed search results, including geolocation data
- Offers a user-friendly GUI in addition to CLI
Cons of snoop
- Primarily focused on Russian-language platforms and users
- Less specialized in Google account investigations
- May require more setup and dependencies
Code Comparison
snoop:
def start(self, username, site):
self.username = username
self.site = site
self.url = self.site['url'].format(username=self.username)
self.error_type = "message"
self.error_code = "status_code"
GHunt:
def get_account_info(email):
gaia_id = get_gaia_id(email)
if gaia_id:
return get_user_data(gaia_id)
return None
Key Differences
- snoop is more versatile for general OSINT across multiple platforms
- GHunt specializes in Google account investigations
- snoop offers a GUI, while GHunt is CLI-only
- GHunt focuses on email-based searches, while snoop uses usernames
- snoop has a larger community and more frequent updates
Both tools are valuable for OSINT, but their focus and use cases differ. Choose based on your specific investigation needs and target platforms.
Convert designs to code with AI
Introducing Visual Copilot: A new AI model to turn Figma designs to high quality code using your components.
Try Visual CopilotREADME
ð GHunt Online version : https://osint.industries
ð Description
GHunt (v2) is an offensive Google framework, designed to evolve efficiently.
It's currently focused on OSINT, but any use related with Google is possible.
Features :
- CLI usage and modules
- Python library usage
- Fully async
- JSON export
- Browser extension to ease login
âï¸ Requirements
- Python >= 3.10
âï¸ Installation
$ pip3 install pipx
$ pipx ensurepath
$ pipx install ghunt
It will automatically use venvs to avoid dependency conflicts with other projects.
ð Usage
Login
First, launch the listener by doing ghunt login
and choose between 1 of the 2 first methods :
$ ghunt login
[1] (Companion) Put GHunt on listening mode (currently not compatible with docker)
[2] (Companion) Paste base64-encoded cookies
[3] Enter manually all cookies
Choice =>
Then, use GHunt Companion to complete the login.
The extension is available on the following stores :
Modules
Then, profit :
Usage: ghunt [-h] {login,email,gaia,drive,geolocate} ...
Positional Arguments:
{login,email,gaia,drive,geolocate}
login Authenticate GHunt to Google.
email Get information on an email address.
gaia Get information on a Gaia ID.
drive Get information on a Drive file or folder.
geolocate Geolocate a BSSID.
Options:
-h, --help show this help message and exit
ð You can also use --json with email, gaia, drive and geolocate modules to export in JSON ! Example :
$ ghunt email <email_address> --json user_data.json
Have fun ð¥°ð
ð§âð» Developers
ð I started writing some docs here and examples here, feel free to contribute !
To use GHunt as a lib, you can't use pipx because it uses a venv.
So you should install GHunt with pip :
$ pip3 install ghunt
And now, you should be able to import ghunt
in your projects !
You can right now play with the examples.
ð® Details
Obvious disclaimer
This tool is for educational purposes only, I am not responsible for its use.
Less obvious disclaimer
This project is under AGPL Licence, and you have to respect it.
Use it only in personal, criminal investigations, pentesting, or open-source projects.
Thanks
- novitae for being my Python colleague
- All the people on Malfrats Industries and elsewhere for the beta test !
- The HideAndSec team ð (blog : https://hideandsec.sh)
- Med Amine Jouini for his beautiful rework of the Google logo, which I was inspired by a lot.
Sponsors
Thanks to these awesome people for supporting me !
You like my work ?
Sponsor me on GitHub ! ð¤
Top Related Projects
Hunt down social media accounts by username across social networks
Stalk your Friends. Find their Instagram, FB and Twitter Profiles using Image Recognition and Reverse Image Search.
🕵️♂️ Collect a dossier on a person by username from thousands of sites
API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites
holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.
Snoop — инструмент разведки на основе открытых данных (OSINT world)
Convert designs to code with AI
Introducing Visual Copilot: A new AI model to turn Figma designs to high quality code using your components.
Try Visual Copilot