H8Mail – Email OSINT And Password Breach Hunting

0
24
H8Mail - Email OSINT And Password Breach Hunting

Email OSINT and password finder.
Use h8mail to search out passwords by different breach and reconnaissance companies, or the notorious “Breach Compilation” torrent.

Features

  • Email sample matching (reg exp), helpful for all these uncooked HTML information
  • Small and quick Alpine Dockerfile out there
  • CLI or Bulk file-studying for concentrating on
  • Output to CSV file
  • Reverse DNS + Open Ports
  • CloudFlare charge throttling avoidance
    • Execution stream stays synchronous and throttled based on API utilization tips written by service suppliers
  • Query and group outcomes from different breach service suppliers
  • Query an area copy of the “Breach Compilation”
  • Get associated emails
  • Delicious colours


Demos

Out of the field

With API companies

With the BreachedCompilation torrent

APIs

Service Functions Status
HaveIBeenPwned Number of electronic mail breachs Yes
Shodan Reverse DNS, Open ports Yes
Hunter.io – Public Number of associated emails Yes
Hunter.io – Service (free tier) Cleartext associated emails Yes
WeLeakInfo – Public Number of search-in a position breach outcomes Soon
WeLeakInfo – Service Cleartext passwords, hashs and salts Soon
Snusbase – Service Cleartext passwords, hashs and salts – Fast Yes

Install
If you are utilizing Docker, ensure that so as to add your targets.txt and your API keys within the configuration file earlier than constructing

Locally
NodeJS is required to make sure CloudFlare bypassing. You can learn the way to put in it to your distribution here
These directions assume you might be operating PythonThree as default. If not sure, please test the troubleshooting part

apt-get set up nodejs
git clone https://github.com/khast3x/h8mail.git
cd h8mail
pip set up -r necessities.txt
python h8mail.py -h

Docker

git clone https://github.com/khast3x/h8mail.git
cd h8mail
docker construct -t h8mail .
docker run -ti h8mail -h

Usage

> python h8mail.py --help
utilization: h8mail.py [-h] -t TARGET_EMAILS [-c CONFIG_FILE] [-o OUTPUT_FILE]
                 [-bc BC_PATH] [-v] [-l] [-k CLI_APIKEYS]

Email data and password discovering instrument

elective arguments:
  -h, --help            present this assist message and exit
  -t TARGET_EMAILS, --targets TARGET_EMAILS
                        Either single electronic mail, or file (one electronic mail per line).
                        REGEXP
  -c CONFIG_FILE, --config CONFIG_FILE
                        Configuration file for API keys
  -o OUTPUT_FILE, --output OUTPUT_FILE
                        File to put in writing output
  -bc BC_PATH, --breachcomp BC_PATH
                        Path to the breachcompilation Torrent.
                        https://ghostbin.com/paste/2cbdn
  -v, --verbose         Show debug data
  -l, --local           Run native actions solely
  -k CLI_APIKEYS, --apikey CLI_APIKEYS
                        Pass config choices. Format is "K:V,K:V"

Usage examples

Query for a single goal

Query for listing of targets, point out config file for API keys, output to pwned_targets.csv

python h8mail.py -t targets.txt -c config.ini -o pwned_targets.csv

Query a listing of targets in opposition to native copy of the Breach Compilation, go API keys for Snusbase from the command line

python h8mail.py -t targets.txt -bc ../Downloads/BreachCompilation/ -k "snusbase_url:$snusbase_url,snusbase_token:$snusbase_token"

Query with out making API calls in opposition to native copy of the Breach Compilation

python h8mail.py -t targets.txt -bc ../Downloads/BreachCompilation/ --local

Troubleshooting

Python model & Kali
The above directions assume you might be operating python3 as default. If not sure, kind:

in your terminal. It must be both Python 3.* or Python 2.*.
If you might be operating python2 as default :
Make positive you could have python3 put in, then change python instructions with express python3 calls:

apt-get set up nodejs
git clone https://github.com/khast3x/h8mail.git
cd h8mail
pip3 set up -r necessities.txt
python3 h8mail.py -h

Notes & Links

MoreTip.com

LEAVE A REPLY

Please enter your comment!
Please enter your name here

This site uses Akismet to reduce spam. Learn how your comment data is processed.