h8mail is an email OSINT and breach hunting tool using different breach and reconnaissance services, or local breaches such as Troy Hunt's "Collection1" and the infamous "Breach Compilation" torrent.

---

---

📖 Table of Content

• Table of Content
• Features
  • APIs
• Usage
• Usage examples
• Thanks & Credits
• Related open source projects

---

🍊 Features

• 🔎 Email pattern matching (reg exp), useful for reading from other tool outputs
• 🌍 Pass URLs to directly find and target emails in pages
• 💫 Loosey patterns for local searchs ("john.smith", "evilcorp")
• 📦 Painless install. Available through pip, only requires requests
• ✅ Bulk file-reading for targeting
• 📝 Output to CSV file or JSON
• 💪 Compatible with the "Breach Compilation" torrent scripts
• 🏠 Search cleartext and compressed .gz files locally using multiprocessing
  • 🌀 Compatible with "Collection#1"
• 🔥 Get related emails
• 🐲 Chase related emails by adding them to the ongoing search
• 👑 Supports premium lookup services for advanced users
• 🏭 Custom query premium APIs. Supports username, hash, ip, domain and password and more
• 📚 Regroup breach results for all targets and methods
• 👀 Includes option to hide passwords for demonstrations
• 🌈 Delicious colors

---

📦 pip3 install h8mail

---

APIs

Service	Functions	Status
HaveIBeenPwned(v3)	Number of email breaches	✅ 🔑
HaveIBeenPwned Pastes(v3)	URLs of text files mentioning targets	✅ 🔑
Hunter.io - Public	Number of related emails	✅
Hunter.io - Service (free tier)	Cleartext related emails, Chasing	✅ 🔑
Snusbase - Service	Cleartext passwords, hashs and salts, usernames, IPs - Fast ⚡	✅ 🔑
Leak-Lookup - Public	Number of search-able breach results	✅ (🔑)
Leak-Lookup - Service	Cleartext passwords, hashs and salts, usernames, IPs, domain	✅ 🔑
Emailrep.io - Service (free)	Last seen in breaches, social media profiles	✅ 🔑
scylla.so - Service (free)	Cleartext passwords, hashs and salts, usernames, IPs, domain	🚧
Dehashed.com - Service	Cleartext passwords, hashs and salts, usernames, IPs, domain	✅ 🔑
IntelX.io - Service (free trial)	Cleartext passwords, hashs and salts, usernames, IPs, domain, Bitcoin Wallets, IBAN	✅ 🔑
🆕 Breachdirectory.org - Service (free)	Cleartext passwords, hashs and salts, usernames, domain	🚧 🔑

🔑 - API key required

---

🍊 Usage

usage: h8mail [-h] [-t USER_TARGETS [USER_TARGETS ...]]
              [-u USER_URLS [USER_URLS ...]] [-q USER_QUERY] [--loose]
              [-c CONFIG_FILE [CONFIG_FILE ...]] [-o OUTPUT_FILE]
              [-j OUTPUT_JSON] [-bc BC_PATH] [-sk]
              [-k CLI_APIKEYS [CLI_APIKEYS ...]]
              [-lb LOCAL_BREACH_SRC [LOCAL_BREACH_SRC ...]]
              [-gz LOCAL_GZIP_SRC [LOCAL_GZIP_SRC ...]] [-sf]
              [-ch [CHASE_LIMIT]] [--power-chase] [--hide] [--debug]
              [--gen-config]

Email information and password lookup tool