Ghunt is a powerful OSINT tools that allows you to gather information about any person just by knowing their email. But it can also be used to search via GIAI ID(a type of identification number used by google) or any google drive/folder link.

While Ghunt is mostly used in threat intelligence, digital forensics and OSINT, it can also be used in everyday life too.

It can extract the following details -

When searched via email -

- user’s profile picture

- Last profile edit

- Google ID(GAID)

- User Type(If google user or not)

- Activated google services

- Associated Youtube Channel(if exists)

- Google Play Games data

- Google Maps Profile

- Google Calender

when searched via GIAI Id –

-        User profile picture

-        Last profile edit

-        User Type(If google user or not)

-        Activated google services

-        Associated Youtube Channel(if exists)

-        Google Play Games data

-        Google Maps Profile

-        Google Calender

GitHub Repo - https://github.com/mxrch/GHunt

Installation

The installation of Ghunt is very simple. Just copy-paste the below command in your terminal in kali linux.

pip3 install pipx

pipx ensurepath

pipx install ghunt

Now, check if its current installed by typing Ghunt in the terminal and click enter.

Congrats, we have successfully installed the tool now.

Setup

Now, let’s setup Ghunt for usage.

Copy paste the following command in your terminal and click enter.

ghunt login

Now, it will display you 4 different options which are as following –

[1] (Companion) Put GHunt on listening mode (currently not compatible with docker)

[2] (Companion) Paste base64-encoded authentication

[3] Enter the oauth_token (stats with "oauth2_4/")

[4] Enter the master token (starts with "aas_et/")

In this tutorial, we will be using the option2.

In order to proceed further, we need to install Ghunt companion extension based on your browser and you need to login one of your google account in the browser(don’t use personal account, use any alternate account)

Ghunt Companion for Chrome, Edge and Opera

Ghunt Companion for Firefox

Now click on the extension icon and click sync with ghunt, it will ask you verify your password, so verify it and then select option on the screen as we will be using it for authentication.

Once it says, Status :Cookies copied to the clipboard !

Go to terminal back and right click and paste the cookie and click enter.

Note – Never share or show this cookie data to anyone else, its just like your password, so it can be used to access a lot of google services on your behalf if you share it with someone else.

Usage

If you want to search via email, use the following command

ghunt email test@gmail.com

(replace test@gmail.com with the email you want to investigate)

It will show you results like below.

(The results data will vary as per the email. Also, the email used in the above demo is not mine.)

Now, let’s understand the search results.

FAQs

Can I hide my info?

You can hide your google map reviews, no other data can be hidden.

Why do I need to install the chrome extension?

The browser extension is sending a login request to google servers which in return is sending the cookie(consider it as a long password) which is being used for extracting data about your target email.