GHunt: An Offensive Google Framework for OSINT and Data Collection

Introduction

GHunt (v2) is an advanced offensive Google framework, meticulously designed to evolve efficiently within the realm of digital reconnaissance. While its primary focus is on Open-Source Intelligence (OSINT), its flexible architecture allows for various other applications related to Google services. This powerful tool provides a comprehensive suite of features, including command-line interface (CLI) usage with modular capabilities, integration as a Python library for custom projects, and fully asynchronous operations for enhanced performance. It also supports JSON export for easy data handling and includes a browser extension to simplify the login process.

GHunt requires Python version 3.10 or higher to run effectively.

Installation

To install GHunt, it is recommended to use pipx, which automatically manages virtual environments to prevent dependency conflicts with other projects. Follow these steps:

$ pip3 install pipx
$ pipx ensurepath
$ pipx install ghunt

For developers who wish to use GHunt as a library within their Python projects, pipx is not suitable due to its use of virtual environments. In this case, you should install GHunt directly with pip:

$ pip3 install ghunt

This will allow you to import ghunt in your projects and leverage its functionalities programmatically.

Examples

Login

Before utilizing GHunt's modules, you need to authenticate it with Google. Launch the listener and choose one of the first two methods:

$ ghunt login

[1] (Companion) Put GHunt on listening mode (currently not compatible with docker)
[2] (Companion) Paste base64-encoded cookies
[3] Enter manually all cookies

Choice =>

Then, use the GHunt Companion browser extension to complete the login. The extension is available for:

Modules

Once logged in, you can explore GHunt's various modules:

Usage: ghunt [-h] {login,email,gaia,drive,geolocate} ...

Positional Arguments:
  {login,email,gaia,drive,geolocate}
    login               Authenticate GHunt to Google.
    email               Get information on an email address.
    gaia                Get information on a Gaia ID.
    drive               Get information on a Drive file or folder.
    geolocate           Geolocate a BSSID.
    spiderdal           Find assets using Digital Assets Links.

Options:
  -h, --help            show this help message and exit

You can also export the output of modules like email, gaia, drive, and geolocate to JSON using the --json flag. For example:

$ ghunt email <email_address> --json user_data.json

Why Use GHunt

GHunt stands out as an invaluable tool for anyone involved in OSINT or digital investigations due to several key advantages:

Powerful OSINT Capabilities: It provides a dedicated framework for gathering information from Google, a vast source of public data.
Flexibility: Whether you prefer command-line operations or integrating functionalities into your Python projects, GHunt offers both options.
Modern Architecture: Being fully asynchronous and compatible with Python 3.10+, it ensures efficient and up-to-date performance.
Ease of Use: The companion browser extension significantly simplifies the often complex Google login process.
Structured Data Output: The ability to export data in JSON format makes it easy to parse, store, and integrate collected information into other tools or databases.

GHunt: An Offensive Google Framework for OSINT and Data Collection

Summary

Repository Info

Tags