holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.
Project example : Holehe Maltego
pip3 install holehe
git clone https://github.com/megadose/holehe.git
cd holehe/
python3 setup.py installholehe -e [email protected]from holehe import *
print(adobe("[email protected]"))
print(lastpass("[email protected]"))| Module | Website | Method | Frequent rate limit |
|---|---|---|---|
| _7cups | 7cups.com | register | ✔ |
| aboutme | about.me | register | ✘ |
| adobe | adobe.com | password recovery | ✘ |
| amazon | amazon.com | login | ✘ |
| bitmoji | bitmoji.com | login | ✘ |
| blablacar | blablacar.com | register | ✔ |
| blip | blip.fm | register | ✔ |
| buymeacoffee | buymeacoffee.com | register | ✔ |
| codecademy | codecademy.com | register | ✔ |
| codepen | codepen.io | register | ✘ |
| coroflot | coroflot.com | register | ✘ |
| discord | discord.com | register | ✘ |
| ebay | ebay.com | login | ✔ |
| ello | ello.co | register | ✘ |
| envato | envato.com | register | ✘ |
| eventbrite | eventbrite.com | login | ✘ |
| evernote | evernote.com | login | ✘ |
| facebook.com | password recovery | ✘ | |
| firefox | firefox.com | register | ✘ |
| freelancer | freelancer.com | register | ✘ |
| github | github.com | register | ✘ |
| google.com | register | ✘ | |
| instagram.com | register | ✔ | |
| issuu | issuu.com | register | ✘ |
| lastfm | last.fm | register | ✘ |
| lastpass | lastpass.com | register | ✘ |
| live | live.com | password recovery | ✘ |
| mail.ru | mail.ru | password recovery | ✘ |
| nike | nike.com | register | ✘ |
| odnoklassniki | ok.ru | password recovery | ✘ |
| office365 | office365.com | other | ✘ |
| pinterest.com | register | ✘ | |
| pornhub | pornhub.com | register | ✘ |
| rambler | rambler.ru | register | ✘ |
| samsung | samsung.com | register | ✘ |
| snapchat | snapchat.com | login | ✘ |
| spotify | spotify.com | register | ✔ |
| taringa | taringa.net | register | ✔ |
| teamtreehouse | teamtreehouse.com | register | ✘ |
| tumblr | tumblr.com | register | ✘ |
| twitter.com | register | ✘ | |
| venmo | venmo.com | register | ✔ |
| vrbo | vrbo.com | register | ✘ |
| wordpress | wordpress.com | login | ✘ |
| yahoo | yahoo.com | login | ✔ |
The result of the modules is in this form : {"rateLimit":False,"exists":True,"emailrecovery":ex****[email protected],"phoneNumber":'0************78","others":None}
- rateLitmit : is to find out if you've been rate-limited
- exists : know an account is associated with the mail
- emailrecovery : it's a partial mail that can potentially be extracted from the mail entered on the module.
- phoneNumber : it's a partial phone number that can potentially be extracted from the mail entered on the module.
- others : is used for all information other for the moment it is only useful for facebook
{"FullName":full_name,"profilePicture":profile_picture}FullName has a lot of false positives, and profilePicture is the url of the profile picture associated with the account.