Convert Figma logo to code with AI

mxrch logoGHunt

🕵️‍♂️ Offensive Google framework.

15,468
1,275
15,468
56

Top Related Projects

57,727

Hunt down social media accounts by username across social networks

Stalk your Friends. Find their Instagram, FB and Twitter Profiles using Image Recognition and Reverse Image Search.

10,065

🕵️‍♂️ Collect a dossier on a person by username from thousands of sites

API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites

7,293

holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.

2,928

Snoop — инструмент разведки на основе открытых данных (OSINT world)

Quick Overview

GHunt is an open-source tool that allows users to gather information about a Google account, including the owner's name, email addresses, phone numbers, and other personal details. It is designed to be a comprehensive reconnaissance tool for security researchers, investigators, and others who need to gather intelligence on Google accounts.

Pros

  • Comprehensive Information Gathering: GHunt can gather a wide range of information about a Google account, including personal details, social media profiles, and more.
  • Automated Workflow: The tool automates many of the manual steps involved in gathering information about a Google account, making the process more efficient.
  • Open-Source and Customizable: GHunt is an open-source project, allowing users to customize and extend the tool to fit their specific needs.
  • Active Development and Community: The project has an active community of contributors and is regularly updated with new features and improvements.

Cons

  • Potential Privacy Concerns: While GHunt is a useful tool for security research and investigation, it could also be used to invade the privacy of individuals, which raises ethical concerns.
  • Reliance on Google APIs: GHunt relies on Google's APIs to gather information, which means that changes to these APIs could potentially break the tool's functionality.
  • Potential for Abuse: Like any powerful tool, GHunt could be misused by bad actors to harass or target individuals, which is a concern that users should be aware of.
  • Limited Scope: While GHunt is a comprehensive tool, it is focused specifically on gathering information about Google accounts and may not be suitable for broader intelligence gathering tasks.

Getting Started

To get started with GHunt, you'll need to follow these steps:

  1. Clone the repository from GitHub:
git clone https://github.com/mxrch/GHunt.git
  1. Install the required dependencies:
cd GHunt
pip install -r requirements.txt
  1. Obtain the necessary Google API credentials:

    • Go to the Google Cloud Console and create a new project.
    • Enable the Google People API and Google Custom Search API for your project.
    • Create a new OAuth client ID and download the client secret JSON file.
  2. Configure GHunt with your Google API credentials:

python ghunt.py --config
  1. Run GHunt to gather information about a Google account:
python ghunt.py -e <email_address>

This will initiate the information gathering process and display the results in the console.

Competitor Comparisons

57,727

Hunt down social media accounts by username across social networks

Pros of Sherlock

  • Broader scope: Searches for usernames across 300+ websites
  • Active community with frequent updates and contributions
  • Supports command-line arguments for customization

Cons of Sherlock

  • Less focused on specific platforms (e.g., Google services)
  • May produce false positives due to the large number of sites checked
  • Requires more setup and dependencies

Code Comparison

Sherlock (Python):

def sherlock(username):
    for site in sites:
        url = site['url'].format(username)
        response = requests.get(url)
        if response.status_code == 200:
            print(f"Found on {site['name']}")

GHunt (Python):

def ghunt(email):
    gaia_id = get_gaia_id(email)
    if gaia_id:
        profile = get_google_profile(gaia_id)
        print(f"Google Profile: {profile}")

Key Differences

  • Sherlock focuses on username searches across multiple platforms
  • GHunt specializes in Google account information retrieval
  • Sherlock is more suitable for general OSINT, while GHunt is tailored for Google-specific investigations
  • GHunt provides more detailed information about Google accounts, including profile data and linked services
  • Sherlock's results are typically limited to account existence, while GHunt can extract additional user details

Stalk your Friends. Find their Instagram, FB and Twitter Profiles using Image Recognition and Reverse Image Search.

Pros of EagleEye

  • Supports multiple social media platforms (Facebook, Instagram, Twitter, etc.)
  • Provides facial recognition capabilities for cross-platform searching
  • Offers a more comprehensive approach to social media OSINT

Cons of EagleEye

  • Less focused on Google-specific data extraction
  • May require more setup and dependencies due to its broader scope
  • Potentially slower processing time due to multi-platform analysis

Code Comparison

EagleEye:

def get_social_media_profiles(name):
    profiles = []
    for platform in SUPPORTED_PLATFORMS:
        profile = platform.search(name)
        if profile:
            profiles.append(profile)
    return profiles

GHunt:

def get_google_account_info(email):
    account_info = {}
    account_info['name'] = get_name(email)
    account_info['profile_pic'] = get_profile_pic(email)
    account_info['last_seen'] = get_last_seen(email)
    return account_info

EagleEye offers a broader approach to social media intelligence gathering, supporting multiple platforms and utilizing facial recognition. However, it may be less efficient for Google-specific data extraction compared to GHunt. GHunt focuses specifically on Google account information, potentially providing more detailed and targeted results for Google-related OSINT. The code comparison illustrates EagleEye's multi-platform approach versus GHunt's Google-centric functionality.

10,065

🕵️‍♂️ Collect a dossier on a person by username from thousands of sites

Pros of Maigret

  • Supports a wider range of platforms and services (500+) for OSINT
  • Offers more detailed output and reporting options
  • Actively maintained with frequent updates

Cons of Maigret

  • May require more setup and dependencies
  • Can be slower due to the large number of services it checks
  • Less focused on Google-specific information

Code Comparison

GHunt (Python):

def get_gaia_id(email):
    res = requests.get(f"https://people-pa.googleapis.com/_/lookup/lookup?email={email}")
    data = json.loads(res.text.replace(")]}'\n\n", ""))
    return data[0][0][2]

Maigret (Python):

async def check_username(username, site):
    url = site['check_uri'].format(username=username)
    response = await self.request(url=url, method=site.get('method', 'GET'))
    return self.check_response_valid(response, site)

Both projects use Python for their core functionality, but GHunt focuses on Google-specific APIs, while Maigret implements a more generic approach for checking usernames across various platforms.

API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites

Pros of social-analyzer

  • Supports a wider range of social media platforms (300+)
  • Provides a web interface for easier use
  • Offers both CLI and API options for integration

Cons of social-analyzer

  • Less focused on Google-specific data
  • May require more setup and dependencies
  • Potentially slower due to broader scope

Code Comparison

social-analyzer:

def check_user(username, sites='all', output='pretty', filter='all', timeout=10, method='all'):
    # Implementation for checking user across multiple platforms

GHunt:

def hunt(email):
    # Implementation for gathering Google account information

Key Differences

GHunt focuses specifically on Google account information, while social-analyzer covers a broader range of social media platforms. GHunt is more specialized and potentially more in-depth for Google-related data, whereas social-analyzer offers a wider scope but may sacrifice some depth for breadth.

GHunt is primarily a command-line tool, while social-analyzer provides both CLI and web interface options. This makes social-analyzer potentially more accessible to non-technical users.

Both tools serve similar purposes in OSINT (Open Source Intelligence) gathering, but their approaches and target platforms differ significantly. The choice between them would depend on the specific requirements of the investigation and the platforms of interest.

7,293

holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.

Pros of holehe

  • Supports a wider range of websites and services (over 120)
  • Faster execution due to asynchronous requests
  • Lightweight and easy to install with pip

Cons of holehe

  • Limited to email-based searches
  • Less detailed information compared to GHunt's comprehensive Google account data
  • May trigger security alerts on some services due to rapid requests

Code Comparison

holehe:

async def instagram(email):
    try:
        async with aiohttp.ClientSession() as session:
            async with session.get("https://www.instagram.com/accounts/web_create_ajax/attempt/", timeout=10) as response:
                if response.status == 200:
                    return {"exists": True, "emailrecovery": None, "phoneNumber": None, "others": None}
    except Exception:
        pass
    return False

GHunt:

def get_account_info(gaiaID):
    url = f"https://people-pa.googleapis.com/v2/people/{gaiaID}?personFields=metadata,photos,names,emailAddresses,phoneNumbers,addresses,birthdays,genders,occupations"
    headers = {"X-Goog-Api-Key": API_KEY}
    req = requests.get(url, headers=headers)
    data = json.loads(req.text)
    return data

The code snippets show different approaches: holehe focuses on individual service checks, while GHunt leverages Google's API for comprehensive account information.

2,928

Snoop — инструмент разведки на основе открытых данных (OSINT world)

Pros of snoop

  • Supports a wider range of social networks and websites (400+)
  • Provides more detailed search results, including geolocation data
  • Offers a user-friendly GUI in addition to CLI

Cons of snoop

  • Primarily focused on Russian-language platforms and users
  • Less specialized in Google account investigations
  • May require more setup and dependencies

Code Comparison

snoop:

def start(self, username, site):
    self.username = username
    self.site = site
    self.url = self.site['url'].format(username=self.username)
    self.error_type = "message"
    self.error_code = "status_code"

GHunt:

def get_account_info(email):
    gaia_id = get_gaia_id(email)
    if gaia_id:
        return get_user_data(gaia_id)
    return None

Key Differences

  • snoop is more versatile for general OSINT across multiple platforms
  • GHunt specializes in Google account investigations
  • snoop offers a GUI, while GHunt is CLI-only
  • GHunt focuses on email-based searches, while snoop uses usernames
  • snoop has a larger community and more frequent updates

Both tools are valuable for OSINT, but their focus and use cases differ. Choose based on your specific investigation needs and target platforms.

Convert Figma logo designs to code with AI

Visual Copilot

Introducing Visual Copilot: A new AI model to turn Figma designs to high quality code using your components.

Try Visual Copilot

README


🌐 GHunt Online version : https://osint.industries


Python minimum version

😊 Description

GHunt (v2) is an offensive Google framework, designed to evolve efficiently.
It's currently focused on OSINT, but any use related with Google is possible.

Features :

  • CLI usage and modules
  • Python library usage
  • Fully async
  • JSON export
  • Browser extension to ease login

✔️ Requirements

  • Python >= 3.10

⚙️ Installation

$ pip3 install pipx
$ pipx ensurepath
$ pipx install ghunt

It will automatically use venvs to avoid dependency conflicts with other projects.

💃 Usage

Login

First, launch the listener by doing ghunt login and choose between 1 of the 2 first methods :

$ ghunt login

[1] (Companion) Put GHunt on listening mode (currently not compatible with docker)
[2] (Companion) Paste base64-encoded cookies
[3] Enter manually all cookies

Choice =>

Then, use GHunt Companion to complete the login.

The extension is available on the following stores :

Firefox   Chrome

Modules

Then, profit :

Usage: ghunt [-h] {login,email,gaia,drive,geolocate} ...

Positional Arguments:
  {login,email,gaia,drive,geolocate}
    login               Authenticate GHunt to Google.
    email               Get information on an email address.
    gaia                Get information on a Gaia ID.
    drive               Get information on a Drive file or folder.
    geolocate           Geolocate a BSSID.

Options:
  -h, --help            show this help message and exit

📄 You can also use --json with email, gaia, drive and geolocate modules to export in JSON ! Example :

$ ghunt email <email_address> --json user_data.json

Have fun 🥰💞

🧑‍💻 Developers

📕 I started writing some docs here and examples here, feel free to contribute !

To use GHunt as a lib, you can't use pipx because it uses a venv.
So you should install GHunt with pip :

$ pip3 install ghunt

And now, you should be able to import ghunt in your projects !
You can right now play with the examples.

📮 Details

Obvious disclaimer

This tool is for educational purposes only, I am not responsible for its use.

Less obvious disclaimer

This project is under AGPL Licence, and you have to respect it.
Use it only in personal, criminal investigations, pentesting, or open-source projects.

Thanks

Sponsors

Thanks to these awesome people for supporting me !

BlWasp  C3n7ral051nt4g3ncy  im-hanzou  gingeleski  ItsMalware  


You like my work ?
Sponsor me on GitHub ! 🤗