GHunt is a OSINT (Open Source Intelligence) tool that can find public information about a Google account.
It can currently extract:
- Owner’s name
- Last time the profile was edited
- Google ID
- If the account is a Hangouts Bot
- Activated Google services (YouTube, Photos, Maps, News360, Hangouts, etc.)
- Possible YouTube channel
- Possible other usernames
- Public photos (P)
- Phones models (P)
- Phones firmware (P)
- Installed Softwares (P)
- Google Maps reviews (M)
- Possible physical location (M)
- Events from Google Calendar (C)
The features marked with a (P) require the target account to have the default setting of
Allow the people you share content with to download your photos and videos on the Google AlbumArchive, or if the target has ever used Picasa linked to their Google account.
More info here.
Those marked with a (M) require the Google Maps reviews of the target to be public (they are by default).
Those marked with a (C) requires user to have Google Calendar set on public (default it is closed)
GHunt relies on Python. Also make sure Git is installed and accessible from the command line with Python. Here are some steps to learn how to install and use this tool.
Step 1: Open the terminal and clone GHunt’s GitHub repository. Run the following command to do it and after the cloning process is done, just CD in the GHunt directory.
git clone https://github.com/mxrch/GHunt
Step 2: Now it is time to install the dependencies. To do that, you just need to issue the following command and wait for it to complete. After it’s done, you should download Chromedriver for your platform from here. Extract it and put the binary in the GHunt folder. If you are Linux the file is “chromedriver” and if you are using Windows the file is “chromedriver.exe”.
python3 -m pip install -r requirements.txt
Step 3: GHunt requires a Google account to work with. And to use your account, you just need to give it cookies so it can work with it. To get the cookies, you just need to copy them from your browser. Make sure you are signed in to the Google account you want to use with GHunt. Open DevTools by pressing the F12 key and then go to the “Applications” section. You then need to copy four specific cookies from the cookies that you will know in the next section.
Step 4: Now run the following command to set cookies. Copy the cookies it asks for from the browser window you opened in the last step.
Step 5: Now you are ready to use the tool. Just run it as shown below. Replace the Gmail address with the destination address and press Enter. It takes a few seconds to analyze the details and show them. This is as simple as that.
python3 hunt.py email@example.com
In this way, you can use GHunt to extract information about any Google account user.