Skip to content

This script checks if email was registered as a login to Facebook, Twitter, Google, Instagram, Twitch, Snapchat and checks if there are compromised passwords for him in pwndb.

Notifications You must be signed in to change notification settings

yevgen2020/email-enum

 
 

Repository files navigation

Email-Enum

Version Status Platform Browser Made with Python

Email-Enum searches mainstream websites and tells you if an email is registered!

Demo Photo

Dependencies

  • Firefox
  • Selenium => 3.14
  • Click => 7.0
  • Termcolor => 1.1
  • PyFiglet => 0.8
  • Proxybroker
  • Pysocks

Installation

Linux

git clone https://github.com/Frint0/email-enum.git
cd email-enum
chmod +x setup.sh
./setup.sh

Windows (Docker)

docker build -t emailenum .
docker run --rm -it emailenum <target email>

Usage

python3 check.py email@gmail.com or ./check.py email@gmail.com option --proxy, --pwndb and --non-headless have been added

To-Do's

  • More Websites
  • Username Enumeration
  • Increased Verbosity
  • More arguments
  • Non-Headless mode
  • integrate automatically checking via pwndb
  • add support socks proxy

and much more...

Proxy

With option --proxy Proxybroker wiil be run local proxy server on 8888 port and will be create pull from min 5 HTTPS proxy. Your don't need to search public proxies , all will be done automatically. Note that proxies are public and often in the headers send your real IP to the server.

Proxy SSLVerifyError

If you get this error, then it was MITM attack attempt using self-signed certificate, which happens all the time on public proxies. To fix it in Linux open the file /home/[your_username]/.local/lib/python3.6/site-packages/proxybroker/judge.py and in line 117 change verify_ssl=False to verify_ssl=True

PwnDB

It's TOR service which contains data from 1.4 billion breach compilation as email:password. Before using --pwndb ensure that service tor has been installed, started and listen 9050 port

Results python check.py somebody@example.com --pwndb

Demo Result

Disclaimer

The use of the email-enum is COMPLETE RESPONSIBILITY of the END-USER. Developers assume NO liability and are NOT responsible for any misuse or damage caused by this program. Email-enum is done entirely via web scraping, if a website changes its element variables or layout, you might need to wait for an updated version of Email-Enum or feel free to contribute.

About

This script checks if email was registered as a login to Facebook, Twitter, Google, Instagram, Twitch, Snapchat and checks if there are compromised passwords for him in pwndb.

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • Python 92.3%
  • Shell 7.7%