SecurityCipher
Home Blog About Us
Resources โ–ผ
โœ… Security Checklists Hub ๐Ÿ—บ๏ธ Penetration Testing Roadmap ๐Ÿค– OWASP Top 10 for LLM Applications ๐Ÿง  LLM AI Security Checklist ๐Ÿ› ๏ธ Security Tools ๐ŸŽฏ Penetration Testing Tricks ๐Ÿ“„ Secure Code Explain ๐Ÿ“– Vulnerability Explain โ˜๏ธ AWS Cloud Security Checklist
My Resume
Our ServicesServices
New On-Call Drive Drive the neon city, jack in, and clear security tickets Play now โ†’
← Security Tools View on GitHub

GHunt

Offensive Google framework to investigate Google accounts with an email.


๐ŸŒ GHunt Online version : https://osint.industries

๐Ÿ Now Python 3.13 compatible !


Python minimum version

๐Ÿ˜Š Description

GHunt (v2) is an offensive Google framework, designed to evolve efficiently.
It's currently focused on OSINT, but any use related with Google is possible.

Features :

  • CLI usage and modules
  • Python library usage
  • Fully async
  • JSON export
  • Browser extension to ease login

โœ”๏ธ Requirements

  • Python >= 3.10

โš™๏ธ Installation

$ pip3 install pipx
$ pipx ensurepath
$ pipx install ghunt

It will automatically use venvs to avoid dependency conflicts with other projects.

๐Ÿ’ƒ Usage

Login

First, launch the listener by doing ghunt login and choose between 1 of the 2 first methods :

$ ghunt login

[1] (Companion) Put GHunt on listening mode (currently not compatible with docker)
[2] (Companion) Paste base64-encoded cookies
[3] Enter manually all cookies

Choice =>

Then, use GHunt Companion to complete the login.

The extension is available on the following stores :

Firefoxย ย ย Chrome

Modules

Then, profit :

Usage: ghunt [-h] {login,email,gaia,drive,geolocate} ...

Positional Arguments:
  {login,email,gaia,drive,geolocate}
    login               Authenticate GHunt to Google.
    email               Get information on an email address.
    gaia                Get information on a Gaia ID.
    drive               Get information on a Drive file or folder.
    geolocate           Geolocate a BSSID.
    spiderdal           Find assets using Digital Assets Links.

Options:
  -h, --help            show this help message and exit

๐Ÿ“„ You can also use --json with email, gaia, drive and geolocate modules to export in JSON ! Example :

$ ghunt email <email_address> --json user_data.json

Have fun ๐Ÿฅฐ๐Ÿ’ž

๐Ÿง‘โ€๐Ÿ’ป Developers

๐Ÿ“• I started writing some docs here and examples here, feel free to contribute !

To use GHunt as a lib, you can't use pipx because it uses a venv.
So you should install GHunt with pip :

$ pip3 install ghunt

And now, you should be able to import ghunt in your projects !
You can right now play with the examples.

๐Ÿ“ฎ Details

Obvious disclaimer

This tool is for educational purposes only, I am not responsible for its use.

Less obvious disclaimer

This project is under AGPL Licence, and you have to respect it.
Use it only in personal, criminal investigations, pentesting, or open-source projects.

Thanks

  • novitae for being my Python colleague
  • All the people on Malfrats Industries and elsewhere for the beta test !
  • The HideAndSec team ๐Ÿ’— (blog : https://hideandsec.sh)
  • Med Amine Jouini for his beautiful rework of the Google logo, which I was inspired by a lot.

Sponsors

Thanks to these awesome people for supporting me !

BlWaspย ย gingeleskiย ย 


You like my work ?
Sponsor me on GitHub ! ๐Ÿค—

Penetration Testing Services

penetration Testing Services

Web Application Security Quiz

Web Application Security Quiz

Daily Bug Bounty Writeups - Twitter

Daily Bug Bounty Writeups

Download our Latest Android Application

Guide for Penetration Testing

Daily Bug Bounty Writeups - Telegram

Daily Bug Bounty Writeups

Author

Piyush
Senior Product Security Engineer

Ethical Hacker || Penetration Tester || Gamer || Blogger || Product Security Engineer || AI Security

READ ARTICLE

Donate

Buy me a Coffee

Recent Posts

  • Cloud Misconfig Bounty Hunting in 2026: Open Buckets, Firebase, and Secrets
    Cloud Misconfig Bounty Hunting in 2026: Open Buckets, Firebase, and Secrets
    September 8, 2026/
    0 Comments
  • DevSecOps From Laptop to Production: A Practical Security Pipeline Guide
    DevSecOps From Laptop to Production: A Practical Security Pipeline Guide
    August 27, 2026/
    0 Comments
  • The CVE Flood Is a Lie: How to Hunt When AI Dumps 36% More Bugs But Exploitation Only Grows 10%
    The CVE Flood Is a Lie: How to Hunt When AI Dumps 36% More Bugs But Exploitation Only Grows 10%
    August 25, 2026/
    0 Comments

Follow Us

SecurityCipher

Practical security guides, vulnerability deep-dives, and hands-on resources for bug bounty hunters and penetration testers.

Useful Links

  • Security Checklists
  • Cybersecurity Jobs
  • Blogs
  • About
  • Contact
ยฉ 2026 SecurityCipher. All rights reserved. Privacy Policies ยท Terms & Conditions