[deleted]
GHunt – An OSINT tool to extract information about a Google account
31–40 of 47 posts
Re: GHunt – An OSINT tool to extract information about a Google account
#32Earlier quoted context omitted.
Looks like Google has a mostly internal user id ("gaia_id"), once you've got this small identifier you can look on each Google related site for publicly available information relating to that user id. Looks like Google is aware of it as the reference to gaia_id has been removed from Youtube pages source (Aug 2020), locked down public accessibility of photo albums (Sep 2020), and prevented connected email address leak…
hmmm... what is this leak from Webmasters?
Good question, found a reference to it in a related blog post: https://sector035.nl/articles/keeping-a-grip-on-google-ids and took it at face value. Can't find anything more looking further.
Re: GHunt – An OSINT tool to extract information about a Google account
#33Unless something changed lately, this is a little deceiving. If you check your own account, it finds albums and can even download some shared photos. If you check the same account but using another account's cookies… surprise surprise, "No album" appears. # Own account Name: ---public name---- Last profile edit : 2019/12/01 Email : ----------@gmail.com Google ID : ------id------ Hangouts Bot : No Activated Google ser…
From the readme: > 02/10/2020 : Since few days ago, Google return a 404 when we try to access someone's Google Photos public albums, we can only access it if we have a link of one of his albums. Either this is a bug and this will be fixed, either it's a protection that we need to find how to bypass. So, currently, the photos & metadata module will always return "No albums" even if there is one.
I hate these date formats. I wish folks would use the iso standard YYYY-MM-DD
Re: GHunt – An OSINT tool to extract information about a Google account
#34Does this run under Linux? I can't install httpx...
yes, but ofthen you have to use python3 and install pip3
Re: GHunt – An OSINT tool to extract information about a Google account
#35Doesn't really work for Google accounts that have reasonable privacy configuration, in which case it only tells you the email (which you specified), the account ID, the main account name and last profile edit. Of these the main account name might be the real name for many people, but I don't think that's required. The account name is also publicly used by Google in a whole bunch of places (e.g. when you read a Google…
I think even if 99% of google users have strict privacy, this tool is still worth it for data brokers as they can run email lists of millions of users. And every data about a user that can be connected to the rest of the master data is gold as its all about the network effect. edit: https://imgur.com/a/o2petUC here is a good example. The white box is from a publically available dataleak of a site called SexDating.se.…
They can run profiles for lots of email accounts that might not be used.
A profile update time stamp isn’t necessarily “I used gmail.”
Google might also notice some random script continually querying for every user.
Seems like a lot of setup for a spammer when lists of Gmail emails are already floating around.
Re: GHunt – An OSINT tool to extract information about a Google account
#36Earlier quoted context omitted.
From the readme: > 02/10/2020 : Since few days ago, Google return a 404 when we try to access someone's Google Photos public albums, we can only access it if we have a link of one of his albums. Either this is a bug and this will be fixed, either it's a protection that we need to find how to bypass. So, currently, the photos & metadata module will always return "No albums" even if there is one.
I hate these date formats. I wish folks would use the iso standard YYYY-MM-DD
Agreed.
However YYYY-MM-DD is symmetric to DD-MM-YYYY ...
Re: GHunt – An OSINT tool to extract information about a Google account
#37Re: GHunt – An OSINT tool to extract information about a Google account
#38Earlier quoted context omitted.
The first sentence reads as a personal attack. I don’t know if you meant it that way and I don’t mind, but that might explain why you are downvoted. I don’t mind people knowing my location. But most people aren’t as tech/security savvy as the average HN user. I am worried for them. And to second another commenter. OSINT is generally using public information in ways that you’re getting too much info about someone. The…
Oh, my. Not a personal attack, for sure. Why? It just seemed a bit obvious to me. If I post a review, with my account, I have been there, right? And if I post a lot of reviews month after month in a certain place, I probably live there, right? This has nothing to do about being tech savvy. It's not about IP geolocation or recognizing user locations from random photos. I understand the OSINT part as well. But the tool…
> Why?
> Don't post reviews all around where you live, then.
Again, I don't mind, as I know letters without tone of voice are tough to interpret (and you don't seem to be downvoted anymore). But because you're using the imperative (I hope I use that word right), it can come across accusatory. It's possible that some people then imagine a bit of a negative tone of voice in such a statement. I know I do, and then I remind myself that I'm reading letters and that the imagined tone of voice (and whatever it might imply) is purely made up by myself. But some people may not do that.
> It just seemed a bit obvious to me. If I post a review, with my account, I have been there, right? And if I post a lot of reviews month after month in a certain place
It is obvious. Except for people that it isn't obvious too. I have a lot of family members who wouldn't think about this. They have a hard time using WhatsApp (barely able) or filling out tax forms. I don't see them immediately realizing that filling out Google reviews would leave them exposed in such a way.
Re: GHunt – An OSINT tool to extract information about a Google account
#39Earlier quoted context omitted.
Oh, my. Not a personal attack, for sure. Why? It just seemed a bit obvious to me. If I post a review, with my account, I have been there, right? And if I post a lot of reviews month after month in a certain place, I probably live there, right? This has nothing to do about being tech savvy. It's not about IP geolocation or recognizing user locations from random photos. I understand the OSINT part as well. But the tool…
> Why? > Don't post reviews all around where you live, then. Again, I don't mind, as I know letters without tone of voice are tough to interpret (and you don't seem to be downvoted anymore). But because you're using the imperative (I hope I use that word right), it can come across accusatory. It's possible that some people then imagine a bit of a negative tone of voice in such a statement. I know I do, and then I rem…
Weve got Snowflakes Inc. checking in right there ><
Re: GHunt – An OSINT tool to extract information about a Google account
#40Unless something changed lately, this is a little deceiving. If you check your own account, it finds albums and can even download some shared photos. If you check the same account but using another account's cookies… surprise surprise, "No album" appears. # Own account Name: ---public name---- Last profile edit : 2019/12/01 Email : ----------@gmail.com Google ID : ------id------ Hangouts Bot : No Activated Google ser…
From the readme: > 02/10/2020 : Since few days ago, Google return a 404 when we try to access someone's Google Photos public albums, we can only access it if we have a link of one of his albums. Either this is a bug and this will be fixed, either it's a protection that we need to find how to bypass. So, currently, the photos & metadata module will always return "No albums" even if there is one.
How convenient that this repo was published just a day too late. Now it’s just advertising something that it doesn’t do, either because it never did or because Google fixed it. I think it’s the former.