Security Cipher
Home Blog About Us
Resources โ–ผ
๐Ÿ—บ๏ธ Penetration Testing Roadmap ๐ŸŒ Web Application Security Checklist ๐Ÿค– OWASP Top 10 for LLM Applications ๐Ÿง  LLM AI Security Checklist ๐Ÿ› ๏ธ Security Tools ๐ŸŽฏ Penetration Testing Tricks ๐Ÿ“„ Secure Code Explain ๐Ÿ“– Vulnerability Explain โ˜๏ธ AWS Cloud Security Checklist
My Resume
Contact Us
← Security Tools View on GitHub

holehe

Checks whether an email is registered on 120+ sites using password-reset and signup flows without alerting the target.

Holehe OSINT - Email to Registered Accounts

๐Ÿ‘‹ Hi there! For any professional inquiries or collaborations, please reach out to me at: megadose@protonmail.com

๐Ÿ“ง Preferably, use your professional email for correspondence. Let's keep it short and sweet, and all in English!

PyPI PyPI - Week PyPI - Downloads PyPI - License

Holehe Online Version

Summary

Efficiently finding registered accounts from emails.

Holehe checks if an email is attached to an account on sites like twitter, instagram, imgur and more than 120 others.

  • Retrieves information using the forgotten password function.
  • Does not alert the target email.
  • Runs on Python 3.

๐Ÿ› ๏ธ Installation

With PyPI

pip3 install holehe

With Github

git clone https://github.com/megadose/holehe.git
cd holehe/
python3 setup.py install

With Docker

docker build . -t my-holehe-image
docker run my-holehe-image holehe test@gmail.com

Quick Start

Holehe can be run from the CLI and rapidly embedded within existing python applications.

๐Ÿ“š CLI Example

holehe test@gmail.com

๐Ÿ“ˆ Python Example

import trio
import httpx

from holehe.modules.social_media.snapchat import snapchat


async def main():
    email = "test@gmail.com"
    out = []
    client = httpx.AsyncClient()

    await snapchat(email, client, out)

    print(out)
    await client.aclose()

trio.run(main)

Module Output

For each module, data is returned in a standard dictionary with the following json-equivalent format :

{
  "name": "example",
  "rateLimit": false,
  "exists": true,
  "emailrecovery": "ex****e@gmail.com",
  "phoneNumber": "0*******78",
  "others": null
}
  • rateLitmit : Lets you know if you've been rate-limited.
  • exists : If an account exists for the email on that service.
  • emailrecovery : Sometimes partially obfuscated recovery emails are returned.
  • phoneNumber : Sometimes partially obfuscated recovery phone numbers are returned.
  • others : Any extra info.

Rate limit? Change your IP.

Maltego Transform : Holehe Maltego

Thank you to :

  • navlys
  • Chris
  • socialscan
  • UhOh365
  • soxoj
  • mxrch (and for the logo)
  • novitae

Donations

For BTC Donations : 1FHDM49QfZX6pJmhjLE5tB2K6CaTLMZpXZ

๐Ÿ“ License

GNU General Public License v3.0

Built for educational purposes only.

Modules

NameDomainMethodFrequent Rate Limit
aboutmeabout.meregisterโœ˜
adobeadobe.compassword recoveryโœ˜
amazonamazon.comloginโœ˜
amocrmamocrm.comregisterโœ˜
anydoany.dologinโœ”
archivearchive.orgregisterโœ˜
armurerieauxerrearmurerie-auxerre.comregisterโœ˜
atlassianatlassian.comregisterโœ˜
axonautaxonaut.comregisterโœ˜
babeshowsbabeshows.co.ukregisterโœ˜
badeggsonlinebadeggsonline.comregisterโœ˜
biosmodsbios-mods.comregisterโœ˜
biotechnologyforumsbiotechnologyforums.comregisterโœ˜
bitmojibitmoji.comloginโœ˜
blablacarblablacar.comregisterโœ”
blackworldforumblackworldforum.comregisterโœ”
blipblip.fmregisterโœ”
blitzortungforum.blitzortung.orgregisterโœ˜
bluegrassrivalsbluegrassrivals.comregisterโœ˜
bodybuildingbodybuilding.comregisterโœ˜
buymeacoffeebuymeacoffee.comregisterโœ”
cambridgemtdiscussion.cambridge-mt.comregisterโœ˜
caringbridgecaringbridge.orgregisterโœ˜
chinaphonearenachinaphonearena.comregisterโœ˜
clashfarmerclashfarmer.comregisterโœ”
codecademycodecademy.comregisterโœ”
codeigniterforum.codeigniter.comregisterโœ˜
codepencodepen.ioregisterโœ˜
coroflotcoroflot.comregisterโœ˜
cpaelitescpaelites.comregisterโœ˜
cpaherocpahero.comregisterโœ˜
cracked_tocracked.toregisterโœ”
crevadocrevado.comregisterโœ”
deliveroodeliveroo.comregisterโœ”
demonforumsdemonforums.netregisterโœ”
devrantdevrant.comregisterโœ˜
diigodiigo.comregisterโœ˜
discorddiscord.comregisterโœ˜
dockerdocker.comregisterโœ˜
dominosfrdominos.frregisterโœ”
ebayebay.comloginโœ”
elloello.coregisterโœ˜
envatoenvato.comregisterโœ˜
eventbriteeventbrite.comloginโœ˜
evernoteevernote.comloginโœ˜
fanpopfanpop.comregisterโœ˜
firefoxfirefox.comregisterโœ˜
flickrflickr.comloginโœ˜
freelancerfreelancer.comregisterโœ˜
freibergdrachenhort.user.stunet.tu-freiberg.deregisterโœ˜
garmingarmin.comregisterโœ”
githubgithub.comregisterโœ˜
googlegoogle.comregisterโœ”
gravatargravatar.comotherโœ˜
hubspothubspot.comloginโœ˜
imgurimgur.comregisterโœ”
insightlyinsightly.comloginโœ˜
instagraminstagram.comregisterโœ”
issuuissuu.comregisterโœ˜
koditvforum.kodi.tvregisterโœ˜
komootkomoot.comregisterโœ”
lapostelaposte.frregisterโœ˜
lastfmlast.fmregisterโœ˜
lastpasslastpass.comregisterโœ˜
mail_rumail.rupassword recoveryโœ˜
mybbcommunity.mybb.comregisterโœ˜
myspacemyspace.comregisterโœ˜
nattyornotnattyornotforum.nattyornot.comregisterโœ˜
naturabuynaturabuy.frregisterโœ˜
ndemiccreationsforum.ndemiccreations.comregisterโœ˜
nextpvrforums.nextpvr.comregisterโœ˜
nikenike.comregisterโœ˜
nimblenimble.comregisterโœ˜
nocrmnocrm.ioregisterโœ˜
nutshellnutshell.comregisterโœ˜
odnoklassnikiok.rupassword recoveryโœ˜
office365office365.comotherโœ”
onlinesequenceronlinesequencer.netregisterโœ˜
parlerparler.comloginโœ˜
patreonpatreon.comloginโœ”
pinterestpinterest.comregisterโœ˜
pipedrivepipedrive.comregisterโœ˜
plurkplurk.comregisterโœ˜
pornhubpornhub.comregisterโœ˜
protonmailprotonmail.chotherโœ˜
quoraquora.comregisterโœ˜
ramblerrambler.ruregisterโœ˜
redtuberedtube.comregisterโœ˜
replitreplit.comregisterโœ”
rocketreachrocketreach.coregisterโœ˜
samsungsamsung.comregisterโœ˜
seoclerksseoclerks.comregisterโœ˜
sevencups7cups.comregisterโœ”
smulesmule.comregisterโœ”
snapchatsnapchat.comloginโœ˜
soundcloudsoundcloud.comregisterโœ˜
sporclesporcle.comregisterโœ˜
spotifyspotify.comregisterโœ”
stravastrava.comregisterโœ˜
taringataringa.netregisterโœ”
teamleaderteamleader.comregisterโœ˜
teamtreehouseteamtreehouse.comregisterโœ˜
tellonymtellonym.meregisterโœ˜
thecardboardthecardboard.orgregisterโœ˜
therianguideforums.therian-guide.comregisterโœ˜
thevapingforumthevapingforum.comregisterโœ˜
tumblrtumblr.comregisterโœ˜
tunefindtunefind.comregisterโœ”
twittertwitter.comregisterโœ˜
venmovenmo.comregisterโœ”
vivinovivino.comregisterโœ˜
voxmediavoxmedia.comregisterโœ˜
vrbovrbo.comregisterโœ˜
vscovsco.coregisterโœ˜
wattpadwattpad.comregisterโœ”
wordpresswordpressloginโœ˜
xingxing.comregisterโœ˜
xnxxxnxx.comregisterโœ”
xvideosxvideos.comregisterโœ˜
yahooyahoo.comloginโœ”
zohozoho.comloginโœ”
Press Escape to close the search panel.

Donate

Buy me a Coffee

Penetration Testing Services - Fiverr

Buy me a Coffee

Penetration Testing Services

penetration Testing Services

Web Application Security Quiz

Web Application Security Quiz

Daily Bug Bounty Writeups - Twitter

Daily Bug Bounty Writeups

Download our Latest Android Application

Guide for Penetration Testing

Daily Bug Bounty Writeups - Telegram

Daily Bug Bounty Writeups

Author

Piyush
Senior Product Security Engineer

Ethical Hacker || Penetration Tester || Gamer || Blogger || Application Security Engineer

READ ARTICLE

Donate

Buy me a Coffee

Recent Posts

  • Web Cache Poisoning in 2026: A Practical Playbook (One Request, Every Victim)
    Web Cache Poisoning in 2026: A Practical Playbook (One Request, Every Victim)
    July 19, 2026/
    0 Comments
  • Is AI Killing Bug Bounty? What the 2026 CVE Flood Really Means for Hunters
    Is AI Killing Bug Bounty? What the 2026 CVE Flood Really Means for Hunters
    July 17, 2026/
    0 Comments
  • AI Pentest Tools in 2026: What Actually Works (T3MP3ST, PentestGPT, Caido and More)
    AI Pentest Tools in 2026: What Actually Works (T3MP3ST, PentestGPT, Caido and More)
    July 16, 2026/
    0 Comments

Follow Us

SecurityCipher

Practical security guides, vulnerability deep-dives, and hands-on resources for bug bounty hunters and penetration testers.

Useful Links

  • Blogs
  • About
  • Contact

Recent Post

  • Web Cache Poisoning in 2026: A Practical Playbook (One Request, Every Victim)
  • Is AI Killing Bug Bounty? What the 2026 CVE Flood Really Means for Hunters
  • AI Pentest Tools in 2026: What Actually Works (T3MP3ST, PentestGPT, Caido and More)
ยฉ 2026 SecurityCipher. All rights reserved. Privacy Policies ยท Terms & Conditions