GHuntgithub.com
Offensive Google framework that pulls the Gaia ID, profile photo, Maps reviews, public calendar, and linked services from a Gmail or Google Workspace address.
emaildetails
tools / email2phonenumber
email2phonenumber
Recovers partial phone digits from the password-reset pages of services and builds candidate full numbers.
freeactiveosscli
field note
Scraping some reset flows can send the target a notification. Only use it when that risk is acceptable. Its US number-block logic is aging.
opsec warning
This tool is active: it interacts directly with the target's infrastructure or may otherwise reveal your interest to the target. Use a research environment and weigh the risk before running it.
similar tools
holehegithub.com
Python CLI that checks whether an email address is registered on 120+ sites by abusing signup and password-recovery flows, without alerting the target.
decent free option, lacks in sources and has false positives
emaildetails
Blackbirdgithub.com
Fast username and email lookup across 600+ sites using the WhatsMyName dataset, with PDF/CSV export and optional AI-generated profile summaries.
usernameemaildetails
h8mailgithub.com
CLI that hunts for an email's breach exposure across multiple APIs (HIBP, DeHashed, Snusbase, IntelX, etc.) and local breach compilations.
emaildetails
recon-nggithub.com
Metasploit-style modular reconnaissance framework in Python, with a marketplace of modules and a built-in workspace database and reporting.
domaincompanyemailip / asndetails
socialscangithub.com
Checks whether a username or email is registered on major platforms (Instagram, X, GitHub, Snapchat, etc.) using signup/reset endpoints for accurate results.
usernameemaildetails