GHunt

GHunt is a modulable OSINT tool designed to evolve over the years, and incorporates many techniques to investigate Google accounts, or objects. It currently has email, document, YouTube and gaia modules.

What can GHunt find ?

Email module:

• Owner's name
• Gaia ID
• Last time the profile was edited
• Profile picture (+ detect custom picture)
• If the account is a Hangouts Bot
• Activated Google services (YouTube, Photos, Maps, News360, Hangouts, etc.)
• Possible YouTube channel
• Possible other usernames
• Google Maps reviews (M)
• Possible physical location (M)
• Events from Google Calendar (C)
• Organizations (work & education) (A)
• Contact emails (A)
• Contact phones (A)
• Addresses (A)
• Public photos (P)
• Phones models (P)
• Phones firmwares (P)
• Installed softwares (P)

Document module:

• Owner's name
• Owner's Gaia ID
• Owner's profile picture (+ detect custom picture)
• Creation date
• Last time the document was edited
• Public permissions
• Your permissions

YouTube module:

• Owner's Gaia ID (through Wayback Machine)
• Detect if the email is visible
• Country
• Description
• Total views
• Joined date
• Primary links (social networks)
• All infos accessible by the Gaia module

Gaia module:

• Owner's name
• Profile picture (+ detect custom picture)
• Possible YouTube channel
• Possible other usernames
• Google Maps reviews (M)
• Possible physical location (M)
• Organizations (work & education) (A)
• Contact emails (A)
• Contact phones (A)
• Addresses (A)

The features marked with a (P) require the target account to have the default setting of Allow the people you share content with to download your photos and videos on the Google AlbumArchive, or if the target has ever used Picasa linked to their Google account. More info here.

Those marked with a (M) require the Google Maps reviews of the target to be public (they are by default). Those marked with a (C) require user to have Google Calendar set on public (default it is closed). Those marked with a (A) require user to have the additional info set on profile with privacy option "Anyone" enabled.