pyWhat – To Identify Emails, IP Addresses

(Last Updated On: June 3, 2021)

pyWhat easily lets you identify emails, IP addresses, and more.

Feed it a .pcap file or some text and it’ll tell you what it is!

Imagine this: You come across some mysterious text 5f4dcc3b5aa765d61d8327deb882cf99 and you wonder what it is. What do you do?

Well, with what all you have to do is ask what “5f4dcc3b5aa765d61d8327deb882cf99” and what will tell you!

what’s job is to identify what something is. Whether it be a file or text! Or even the hex of a file! What about text within files? We have that too! what is recursive, it will identify everything in text and more!

Faster Analysis of Pcap files


Say you have a .pcap file from a network attack. What can identify this and quickly find you:

  • All hashes
  • Credit card numbers
  • Cryptocurrency addresses
  • Social Security Numbers
  • and much more.

With what, you can identify the important things in the pcap in seconds, not minutes.

The easiest way to identify anything

pip3 install pywhat && pywhat --help


Anytime you have a file and you want to find structured data in it that’s useful, What is for you.

Or if you come across some piece of text and you don’t know what it is, What will tell you.

File Opening You can pass in a file path by what “this/is/a/file/path”. What is smart enough to figure out it’s a file!

Download PyWhat

Previous Article

sysmon-modular A Sysmon configuration repository

Next Article
Fujifilm Cyber attack

Cyber Attack On Fujifilm Servers Possibility Ransomware

Related Posts