megadose/holehe
A tool that tells you which websites an email address is signed up on
holehe is a Python tool that checks whether a given email address has an account on over 120 sites including Twitter, Instagram, and Netflix. It works by probing each site's password recovery process rather than logging in, so the target never gets notified. It can be run directly from the command line or imported into other Python projects.
What it does
- Given a single email address, it checks account existence across more than 120 services such as Amazon, GitHub, Spotify, and Snapchat in one go
- Instead of actually logging in, it mimics each site's 'forgot password' or registration flow and reads the response, so no alert is sent to the target email
- Each result comes back in a standard format showing whether the account exists, a partially masked recovery email or phone number if returned, and whether the request got rate-limited
- It can be installed via pip, cloned from GitHub, or run as a Docker container, and a separate Maltego transform is available for graph-based investigations
Why it matters
Knowing which services an email is registered to is useful for security investigations and identity research (OSINT), and just as usefully lets people check their own exposure across the web. It's worth noting the project is built for educational purposes and released under the GNU GPL v3.0 license.
Terms in this repo
- OSINT · Open Source Intelligence, gathering and analyzing publicly available information
- rate limit · when a site temporarily blocks access after receiving too many requests in a short time
- Maltego · investigation software that visualizes connections between pieces of information
- password recovery flow · the process a site uses to send a reset email to a registered address; holehe checks the account's existence by watching how this process responds
Repository description (English)
holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.
Open on GitHubTrending repos
- cathrynlavery/diagram-designA skill that makes AI coding tools draw magazine-quality diagrams instead of generic rounded boxes
- public-apis/public-apisA giant crowd-curated directory of free APIs for developers
- semantica-agi/semanticaAn open-source graph infrastructure that lets AI agents show their work, not just their answers
- cactus-compute/needleA 14MB AI model small enough to run tool-calling on a phone or watch, without internet
- unslothai/unslothA desktop app that lets you run and train AI models on your own computer, no coding required
- macro-inc/macroAn all-in-one workspace where email, chat, docs, tasks, and CRM are cross-linked and share one AI memory
- harry0703/MoneyPrinterTurboAn open-source tool that turns a single topic or keyword into a finished short video, complete with script, footage, subtitles, and music
- basecamp/omarchyA ready-made, opinionated Linux setup built by DHH
Latest from METAL LAB
- Grok leaks conversations, location data via commands hidden in ciphertext
- Cursor lets agents handle long-running tasks with new "/goal" command
- NVIDIA releases Switchyard, an LLM routing proxy for coding agents
- Caveman Cuts Claude Code Token Usage by 33% Using Caveman-Speak
- Apple Keeps 2027 Target for Camera AirPods, Qwen3.8-27B Makes 80 Tool Calls Locally