GHunt- OSINT Suite to Investigate Google Accounts

GHUNT
GHUNT

GHunt is an OSINT suite to extract information from any Google Account using an email.

It also helps to Investigate Google Accounts to find their real name, photos, location, Youtube channel.

It can currently extract:

  • Owner’s name
  • Last time the profile was edited
  • Google ID
  • If the account is a Hangouts Bot
  • Activated Google services (YouTube, Photos, Maps, News360, Hangouts, etc.)
  • Possible YouTube channel
  • Possible other usernames
  • Public photos
  • Phone models
  • Phone firmwares
  • Installed software
  • Google Maps reviews
  • Possible physical location
GHunt Screenshot
GHunt Screenshot

Latest update by developer

  • 02/10/2020 : Since few days ago, Google return a 404 when we try to access someone’s Google Photos public albums, we can only access it if we have a link of one of his albums.
    Either this is a bug and this will be fixed, either it’s a protection that we need to find how to bypass.
  • 03/10/2020 : Successfully bypassed.  (commit 01dc016)
    It requires the “Profile photos” album to be public (it is by default)

Installation

  • Docker

You can build the Docker image with:

docker build --build-arg UID=$(id -u ${USER}) --build-arg GID=$(id -g ${USER}) -t ghunt .

Any of the scripts can be invoked through:

docker run -v $(pwd)/resources:/usr/src/app/resources -ti ghunt check_and_gen.py
docker run -v $(pwd)/resources:/usr/src/app/resources -ti ghunt hunt.py <email_address>

Manual installation

  • Make sure you have Python 3.6.1+ installed. (I developed it with Python 3.8.1)
  • These Python modules are required (we’ll install them later):
geopy
httpx
selenium-wire
selenium
imagehash
pillow
python-dateutil

1. Chromedriver and Google Chrome

This project uses Selenium, so you’ll need to download chromedriver.

After you do that, put it in the GHunt folder. Make sure it’s called “chromedriver.exe” or “chromedriver”.
Be sure to have Google Chrome installed, and that Google Chrome and chromedriver have the same version.

2. Requirements

In the GHunt folder, run:

python -m pip install -r requirements.txt

Adapt the command to your operating system if needed.

Usage

For the first run and sometimes after, you’ll need to check the validity of your cookies.
To do this, run check_and_gen.py.

If you don’t have cookies stored (ex: first launch), you will be asked for the 4 required cookies. If they are valid, it will generate the Authentication token and the Google Docs & Hangouts tokens.

Also See: How To Do Web Cookies Work In Browser?

Then, you can run the tool like this:

python hunt.py [email protected]

I suggest you make an empty account just for this or use an account where you never login because depending on your browser/location, re-logging in into the Google Account used for the cookies can deauthorize them.

Where I find these 4 cookies ?

  1. Log in to accounts.google.com
  2. After that, open the Dev Tools window and navigate to the Storage tab (Shift + F9 on Firefox) (It’s called “Application” on Chrome)
  3. If you don’t know how to open it, just right-click anywhere and click “Inspect Element”.
  4. Then you’ll find every cookie you need, including the 4 ones.

Ghunt cookies

According to developer, this software is based on Sector’s research on Google IDs.

Download GHunt

For the latest update about Cyber and Infosec World, follow us on Twitter, Facebook, Telegram , Instagram and subscribe to our YouTube Channel.

Subscribe to HackersOnlineClub via Email

Enter your Email address to receive notifications of Latest Posts by Email | Join over Million Followers

More from Priyanshu Sahay

Tails 4.5 LIVE Linux Operating System For Privacy And Anonymity Released

New Tails 4.5 LIVE Linux OS Released To use Internet connection anonymously...
Read More