GHunt is an OSINT tool to extract a lot of informations of someone's Google Account email.
It can currently extract :
- Owner's name
- Last time the profile was edited
- Google ID
- If the account is an Hangouts Bot
- Activated Google services (Youtube, Photos, Maps, News360, Hangouts, etc.)
- Possible Youtube channel
- Possible other usernames
- Public photos
- Phones models
- Phones firmwares
- Installed softwares
- Google Maps reviews
- Possible physical location
02/10/2020 : Since few days ago, Google return a 404 when we try to access someone's Google Photos public albums, we can only access it if we have a link of one of his albums.
Either this is a bug and this will be fixed, either it's a protection that we need to find how to bypass.
So, currently, the photos & metadata module will always return "No albums" even if there is one.
- Python 3.6+ would be ok. (I developed it with Python 3.8.1)
- These Python modules are required (we'll install them after):
geopy
httpx
selenium-wire
selenium
imagehash
pillow
python-dateutil
This project uses Selenium, so you'll need to download the chromedriver here : https://chromedriver.chromium.org/downloads
And put it in the GHunt folder. Be sure it's called "chromedriver.exe" or "chromedriver".
Also, be sure to have Google Chrome installed.
In the GHunt folder, do this:
python -m pip install -r requirements.txtAdapt the command with your operating system if needed.
For the first usage and sometimes after, you'll need to check the validity of your cookies.
To do this, launch check_and_gen.py.
If you don't have cookies stored (ex: first launch) it will ask you the 4 needed cookies, enter them and if they are valid, it will generate the Authentification token, and the Google Docs & Hangouts tokens.
Then, you can run the tool like this :
python hunt.py myemail@gmail.com- Login to accounts.google.com
- Once connected, open the Developer pop-up and goes to the Storage tab (Shift + F9) (looks like it's called "Application" on Chrome)
If you don't know how to open it, just right-click somewhere and "Inspect Element" - Then you'll find every cookie you need, including the 4 ones.
This tool is based on the Sector's researches on the Google IDs : https://sector035.nl/articles/getting-a-grasp-on-google-ids
And completed by my own researches.
If I have the motivation to write a blog post about it, I'll add the link here !