Hacking Tools

GHunt – Mastering Google With Advanced OSINT Techniques

GHunt v2 is a sophisticated offensive Google framework tailored for OSINT tasks and more. With a focus on efficiency and versatility, this tool offers a range of features including CLI usage, asynchronous operations, and browser integration.

Ideal for security professionals and researchers, GHunt sets the stage for advanced Google data exploration.

GHunt (v2) is an offensive Google framework, designed to evolve efficiently.
It’s currently focused on OSINT, but any use related with Google is possible.

Features :

  • CLI usage and modules
  • Python library usage
  • Fully async
  • JSON export
  • Browser extension to ease login

Requirements

  • Python >= 3.10

Installation

$ pip3 install pipx
$ pipx ensurepath
$ pipx install ghunt

It will automatically use venvs to avoid dependency conflicts with other projects.

Usage

Login

First, launch the listener by doing ghunt login and choose between 1 of the 2 first methods :

$ ghunt login

[1] (Companion) Put GHunt on listening mode (currently not compatible with docker)
[2] (Companion) Paste base64-encoded cookies
[3] Enter manually all cookies

Choice =>

Modules

Then, profit :

usage: ghunt [-h] {login,email,gaia,drive} ...

positional arguments:
  {login,email,gaia,drive}
    login   (--clean)         Authenticate GHunt to Google.
    email   (--json)          Get information on an email address.
    gaia    (--json)          Get information on a Gaia ID.
    drive   (--json)          Get information on a Drive file or folder.

options:
  -h, --help            show this help message and exit

You can also use –json with email, gaia and drive modules to export in JSON ! Example :

$ ghunt email <email_address> --json user_data.json
Varshini

Varshini is a Cyber Security expert in Threat Analysis, Vulnerability Assessment, and Research. Passionate about staying ahead of emerging Threats and Technologies.

Recent Posts

Vermilion : Mastering Linux Post-Exploitation For Red Team Success

Vermilion is a simple and lightweight CLI tool designed for rapid collection, and optional exfiltration…

1 day ago

AD-CS-Forest-Exploiter : Mastering Security Through PowerShell For AD CS Misconfiguration

ADCFFS is a PowerShell script that can be used to exploit the AD CS container…

1 day ago

Usage Of Tartufo – A Comprehensive Guide To Securing Your Git Repositories

Tartufo will, by default, scan the entire history of a git repository for any text…

1 day ago

Loco : A Rails-Inspired Framework For Rust Developers

Loco is strongly inspired by Rails. If you know Rails and Rust, you'll feel at…

2 days ago

Monolith : The Ultimate Tool For Storing Entire Web Pages As Single HTML Files

A data hoarder’s dream come true: bundle any web page into a single HTML file.…

2 days ago