email2phonenumbergithub.com
Recovers partial phone digits from the password-reset pages of services and builds candidate full numbers.
emaildetails
tools / ghunt
GHunt
Offensive Google framework that pulls the Gaia ID, profile photo, Maps reviews, public calendar, and linked services from a Gmail or Google Workspace address.
freeacct reqosscliextension
field note
Authenticate with a burner Google account through the companion browser extension. Public Maps reviews often reveal home areas and routines.
used in playbooks
similar tools
Epieosepieos.com
Web lookup for an email or phone that shows the linked Google account (name, photo, Maps reviews) and registrations on dozens of services.
emailphonedetails
holehegithub.com
Python CLI that checks whether an email address is registered on 120+ sites by abusing signup and password-recovery flows, without alerting the target.
decent free option, lacks in sources and has false positives
emaildetails
Blackbirdgithub.com
Fast username and email lookup across 600+ sites using the WhatsMyName dataset, with PDF/CSV export and optional AI-generated profile summaries.
usernameemaildetails
h8mailgithub.com
CLI that hunts for an email's breach exposure across multiple APIs (HIBP, DeHashed, Snusbase, IntelX, etc.) and local breach compilations.
emaildetails
recon-nggithub.com
Metasploit-style modular reconnaissance framework in Python, with a marketplace of modules and a built-in workspace database and reporting.
domaincompanyemailip / asndetails