Holehe OSINT - Email to Registered Accounts

Overview

Holehe OSINT - Email to Registered Accounts

PyPI PyPI - Week PyPI - Downloads PyPI - License

Summary

Efficiently finding registered accounts from emails.

Holehe checks if an email is attached to an account on sites like twitter, instagram, imgur and more than 120 others.

πŸ› οΈ Installation

With PyPI

pip3 install holehe

With Github

git clone https://github.com/megadose/holehe.git
cd holehe/
python3 setup.py install

Quick Start

Holehe can be run from the CLI and rapidly embedded within existing python applications.

πŸ“š CLI Example

πŸ“ˆ Python Example

import trio
import httpx

from holehe.modules.social_media.snapchat import snapchat


async def main():
    email = "[email protected]"
    out = []
    client = httpx.AsyncClient()

    await snapchat(email, client, out)

    print(out)
    await client.aclose()

trio.run(main)

Module Output

For each module, data is returned in a standard dictionary with the following json-equivalent format :

{
  "name": "example",
  "rateLimit": false,
  "exists": true,
  "emailrecovery": "ex****[email protected]",
  "phoneNumber": "0*******78",
  "others": null
}
  • rateLitmit : Lets you know if you've been rate-limited.
  • exists : If an account exists for the email on that service.
  • emailrecovery : Sometimes partially obfuscated recovery emails are returned.
  • phoneNumber : Sometimes partially obfuscated recovery phone numbers are returned.
  • others : Any extra info.

Rate limit? Change your IP.

Maltego Transform : Holehe Maltego

Thank you to :

Donations

For BTC Donations : 1FHDM49QfZX6pJmhjLE5tB2K6CaTLMZpXZ

πŸ“ License

GNU General Public License v3.0

Built for educational purposes only.

Modules

Name Domain Method Frequent Rate Limit
aboutme about.me register ✘
adobe adobe.com password recovery ✘
amazon amazon.com login ✘
amocrm amocrm.com register ✘
anydo any.do login βœ”
archive archive.org register ✘
armurerieauxerre armurerie-auxerre.com register ✘
atlassian atlassian.com register ✘
axonaut axonaut.com register ✘
babeshows babeshows.co.uk register ✘
badeggsonline badeggsonline.com register ✘
biosmods bios-mods.com register ✘
biotechnologyforums biotechnologyforums.com register ✘
bitmoji bitmoji.com login ✘
blablacar blablacar.com register βœ”
blackworldforum blackworldforum.com register βœ”
blip blip.fm register βœ”
blitzortung forum.blitzortung.org register ✘
bluegrassrivals bluegrassrivals.com register ✘
bodybuilding bodybuilding.com register ✘
buymeacoffee buymeacoffee.com register βœ”
cambridgemt discussion.cambridge-mt.com register ✘
caringbridge caringbridge.org register ✘
chinaphonearena chinaphonearena.com register ✘
clashfarmer clashfarmer.com register βœ”
codecademy codecademy.com register βœ”
codeigniter forum.codeigniter.com register ✘
codepen codepen.io register ✘
coroflot coroflot.com register ✘
cpaelites cpaelites.com register ✘
cpahero cpahero.com register ✘
cracked_to cracked.to register βœ”
crevado crevado.com register βœ”
deliveroo deliveroo.com register βœ”
demonforums demonforums.net register βœ”
devrant devrant.com register ✘
diigo diigo.com register ✘
discord discord.com register ✘
docker docker.com register ✘
dominosfr dominos.fr register βœ”
ebay ebay.com login βœ”
ello ello.co register ✘
envato envato.com register ✘
eventbrite eventbrite.com login ✘
evernote evernote.com login ✘
fanpop fanpop.com register ✘
firefox firefox.com register ✘
flickr flickr.com login ✘
freelancer freelancer.com register ✘
freiberg drachenhort.user.stunet.tu-freiberg.de register ✘
garmin garmin.com register βœ”
github github.com register ✘
google google.com register βœ”
gravatar gravatar.com other ✘
hubspot hubspot.com login ✘
imgur imgur.com register βœ”
insightly insightly.com login ✘
instagram instagram.com register βœ”
issuu issuu.com register ✘
koditv forum.kodi.tv register ✘
komoot komoot.com register βœ”
laposte laposte.fr register ✘
lastfm last.fm register ✘
lastpass lastpass.com register ✘
mail_ru mail.ru password recovery ✘
mybb community.mybb.com register ✘
myspace myspace.com register ✘
nattyornot nattyornotforum.nattyornot.com register ✘
naturabuy naturabuy.fr register ✘
ndemiccreations forum.ndemiccreations.com register ✘
nextpvr forums.nextpvr.com register ✘
nike nike.com register ✘
nimble nimble.com register ✘
nocrm nocrm.io register ✘
nutshell nutshell.com register ✘
odampublishing forum.odampublishing.com register ✘
odnoklassniki ok.ru password recovery ✘
office365 office365.com other βœ”
onlinesequencer onlinesequencer.net register ✘
parler parler.com login ✘
patreon patreon.com login βœ”
pinterest pinterest.com register ✘
pipedrive pipedrive.com register ✘
plurk plurk.com register ✘
pornhub pornhub.com register ✘
protonmail protonmail.ch other ✘
quora quora.com register ✘
raidforums raidforums.com register βœ”
rambler rambler.ru register ✘
redtube redtube.com register ✘
replit replit.com register βœ”
rocketreach rocketreach.co register ✘
samsung samsung.com register ✘
seoclerks seoclerks.com register ✘
sevencups 7cups.com register βœ”
smule smule.com register βœ”
snapchat snapchat.com login ✘
soundcloud soundcloud.com register ✘
sporcle sporcle.com register ✘
spotify spotify.com register βœ”
strava strava.com register ✘
taringa taringa.net register βœ”
teamleader teamleader.com register ✘
teamtreehouse teamtreehouse.com register ✘
tellonym tellonym.me register ✘
thecardboard thecardboard.org register ✘
therianguide forums.therian-guide.com register ✘
thevapingforum thevapingforum.com register ✘
treasureclassifieds forum.treasureclassifieds.com register ✘
tumblr tumblr.com register ✘
tunefind tunefind.com register βœ”
twitter twitter.com register ✘
venmo venmo.com register βœ”
vivino vivino.com register ✘
voxmedia voxmedia.com register ✘
vrbo vrbo.com register ✘
vsco vsco.co register ✘
wattpad wattpad.com register βœ”
wordpress wordpress login ✘
xing xing.com register ✘
xnxx xnxx.com register βœ”
xvideos xvideos.com register ✘
yahoo yahoo.com login βœ”
zoho zoho.com login βœ”
Owner
Palenath
Palenath
Exploit for CVE-2017-17562 vulnerability, that allows RCE on GoAhead (< v3.6.5) if the CGI is enabled and a CGI program is dynamically linked.

GoAhead RCE Exploit Exploit for CVE-2017-17562 vulnerability, that allows RCE on GoAhead ( v3.6.5) if the CGI is enabled and a CGI program is dynamic

Francisco SpΓ­nola 2 Dec 12, 2021
compact and speedy hash cracker for md5, sha1, and sha256 hashes

hash-cracker hash cracker is a multi-functional and compact...hash cracking tool...that supports dictionary attacks against three kinds of hashes: md5

Abdullah Ansari 3 Feb 22, 2022
Let's you scan the entire internet in a couple of hours and identify all Minecraft servers on IPV4

Minecraft-Server-Scanner Let's you scan the entire internet in a couple of hours and identify all Minecraft servers on IPV4 Installation and running i

116 Jan 08, 2023
SecurAID securely connects aid organizations directly with individuals in dangerous situations to allow them to discreetly and effectively get the assistance they need.

SecurAID securely connects aid organizations directly with individuals in dangerous situations to allow them to discreetly and effec

Ty K 2 Mar 23, 2022
PoC for CVE-2020-6207 (Missing Authentication Check in SAP Solution Manager)

PoC for CVE-2020-6207 (Missing Authentication Check in SAP Solution Manager) This script allows to check and exploit missing authentication checks in

chipik 82 Nov 09, 2022
A python tool capable of creating HUGE wordlists. Has the ability to add custom words for concatenation in any way you see fit.

A python tool capable of creating HUGE wordlists. Has the ability to add custom words for concatenation in any way you see fit.

Codex 9 Oct 05, 2022
Generate MIPS reverse shell shellcodes easily !

MIPS-Reverse MIPS-Reverse is a tool that can generate shellcodes for the MIPS architecture that launches a reverse shell where you can specify the IP

29 Jul 27, 2021
On-demand scanning for container registries

Lacework registry scanner Install & configure Lacework CLI Integrate a Container Registry Go to Lacework Resources Containers Container Image In

Will Robinson 1 Dec 14, 2021
Scan your logs for CVE-2021-44228 related activity and report the attackers

jndiRep - CVE-2021-44228 Basically a bad grep on even worse drugs. search for malicious strings decode payloads print results to stdout or file report

js-on 2 Nov 24, 2022
PyFUD - Fully Undetectable payload generator for metasploit

PyFUD fully Undetectable payload generator for metasploit Usage: pyfud.py --host

3 Mar 25, 2022
Discord Token Stealer Malware Protection

TokenGuard TokenGuard, protect your account, prevent token steal. Totally free and open source Discord Server: https://discord.gg/EmwfaGuBE8 Source Co

10 Nov 23, 2022
A Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF or LFI.

BurpParamFlagger A Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF

Allyson O'Malley 118 Nov 07, 2022
Nmap automated port scanner written in Python

port-scanner Nmap automated port scanner written in Python. USE: Clone the module Import the module: from portscanModule import portscanner Use: ports

Brayden Karnes 1 Dec 03, 2021
Sonoff NSPanel protocol and hacking information. Tasmota Berry driver for NSPanel

NSPanel Hacking Sonoff NSPanel protocol and hacking information and Tasmota Berry driver. NSPanel protocol manual Tasmota driver nspanel.be Installati

blakadder 98 Dec 26, 2022
pythonε†™ηš„δΈ€ζ¬Ύε…ζ€ε·₯ε…·οΌˆshellcodeεŠ θ½½ε™¨οΌ‰BypassAVοΌŒε›½ε†…ζ€θ½―ε…¨θΏ‡οΌˆwindows denfendοΌ‰

pythonε†™ηš„δΈ€ζ¬Ύε…ζ€ε·₯ε…·οΌˆshellcodeεŠ θ½½ε™¨οΌ‰BypassAVοΌŒε›½ε†…ζ€θ½―ε…¨θΏ‡οΌˆwindows denfendοΌ‰

1frame 266 Jan 02, 2023
Proof-of-concept obfuscation toolkit for C# post-exploitation tools

InvisibilityCloak Proof-of-concept obfuscation toolkit for C# post-exploitation tools. This will perform the below actions for a C# visual studio proj

259 Dec 19, 2022
A brute force tool for password-protected zip file

Bzip A brute force tool for password-protected zip file/folder(s). Note that this tool can only crack .zip files. Please DO not misuse. Installation g

3 Nov 13, 2021
Privacy-respecting metasearch engine

Privacy-respecting, hackable metasearch engine / pronunciation səːks. If you are looking for running instances, ready to use, then visit searx.space.

Searx engine 12.4k Jan 08, 2023
π™Ύπš™πšŽπš— πš‚πš˜πšžπš›πšŒπšŽ πš‚πšŒπš›πš’πš™πš - π™½πš˜ π™²πš˜πš™πš’πš›πš’πšπš‘πš - πšƒπšŽπšŠπš– πš†πš˜πš›πš” - πš‚πš’πš–πš™πš•πšŽ π™Ώπš’πšπš‘πš˜πš— π™Ώπš›πš˜πš“πšŽπšŒπš - π™²πš›πšŽπšŠπšπšŽπš π™±πš’ : π™°πš•πš• πšƒπšŽπšŠπš– - π™²πš˜πš™πš’π™ΏπšŠπšœπš π™²πšŠπš— π™½πš˜πš π™ΌπšŠπš”πšŽ 𝚈𝚘𝚞 πšπšŽπšŠπš• π™Ώπš›πš˜πšπš›πšŠπš–πš–πšŽπš›

π™Ύπš™πšŽπš— πš‚πš˜πšžπš›πšŒπšŽ πš‚πšŒπš›πš’πš™πš - π™½πš˜ π™²πš˜πš™πš’πš›πš’πšπš‘πš - πšƒπšŽπšŠπš– πš†πš˜πš›πš” - πš‚πš’πš–πš™πš•πšŽ π™Ώπš’πšπš‘πš˜πš— π™Ώπš›πš˜πš“πšŽπšŒπš - π™²πš›πšŽπšŠπšπšŽπš π™±πš’ : π™°πš•πš• πšƒπšŽπšŠπš– - π™²πš˜πš™πš’π™ΏπšŠπšœπš π™²πšŠπš— π™½πš˜πš π™ΌπšŠπš”πšŽ 𝚈𝚘𝚞 πšπšŽπšŠπš• π™Ώπš›πš˜πšπš›πšŠπš–πš–πšŽπš›

CodeX-ID 2 Oct 27, 2022
Pre-Auth Blind NoSQL Injection leading to Remote Code Execution in Rocket Chat 3.12.1

CVE-2021-22911 Pre-Auth Blind NoSQL Injection leading to Remote Code Execution in Rocket Chat 3.12.1 The getPasswordPolicy method is vulnerable to NoS

Enox 47 Nov 09, 2022