Overview
Holehe is a powerful OSINT tool designed to efficiently scan over 120 websites, including major platforms like Twitter and Instagram, to determine if an email address is registered with an account. It leverages the "forgotten password" functionality of these sites to gather this information without alerting the target email.
Key Features
- Extensive Website Coverage: Checks for registered accounts across a vast network of over 120 popular websites and services.
- Stealthy Operation: Utilizes the forgotten password feature, ensuring no notifications are sent to the email owner.
- Information Retrieval: Can extract partially obfuscated recovery emails and phone numbers where available.
- Flexible Integration: Easily installable via PyPI, GitHub, or Docker, and usable both as a standalone CLI tool and within Python applications.
- Standardized Output: Provides consistent JSON-like output for each module, detailing account existence, rate limits, and any additional recoverable information.
Typical Use Cases
- Digital Footprint Analysis: Quickly ascertain the online presence associated with a given email address.
- Investigative Research: Assist in identifying potential accounts linked to an email for further investigation.
- Security Audits: Verify if an email is exposed on various public-facing platforms.
- Account Recovery Assistance: Aid in understanding which services an email might be registered with when password recovery is needed.
