GHunt is an OSINT tool to extract a lot of informations of someone’s Google Account email.

It can currently extract :

Screenshots

 

Warning

Installation

geopy
httpx
selenium-wire
selenium
imagehash
pillow
python-dateutil

1. Chromedriver & Google Chrome

This project uses Selenium, so you’ll need to download the chromedriver here : https://chromedriver.chromium.org/downloads
And put it in the GHunt folder. Be sure it’s called “chromedriver.exe” or “chromedriver”.
Also, be sure to have Google Chrome installed.

2. Requirements

In the GHunt folder, do this:

python -m pip install -r requirements.txt

Adapt the command with your operating system if needed.

Usage

For the first usage and sometimes after, you’ll need to check the validity of your cookies.
To do this, launch check_and_gen.py.
If you don’t have cookies stored (ex: first launch) it will ask you the 4 needed cookies, enter them and if they are valid, it will generate the Authentification token, and the Google Docs & Hangouts tokens.

Then, you can run the tool like this :

python hunt.py myemail@gmail.com

Every time you re-login to the Google Account used for the cookies, it will break their validity, so I highly suggest you to make an empty account just for that, or use an account where you never login.
Ok but where I find these 4 cookies?

  1. Login to accounts.google.com
  2. Once connected, open the Dev Tools window and goes to the Storage tab (Shift F9 on Firefox) (looks like it’s called “Application” on Chrome)
    If you don’t know how to open it, just right-click somewhere and “Inspect Element”
  3. Then you’ll find every cookie you need, including the 4 ones.

Thanks

This tool is based on the Sector’s researches on the Google IDs : https://sector035.nl/articles/getting-a-grasp-on-google-ids
And completed by my own researches.
If I have the motivation to write a blog post about it, I’ll add the link here!

Download GHunt

Leave a Reply

Your email address will not be published. Required fields are marked *