Ghunt

2.3.4

Offensive Google framework.

Verified 24 Sept 2026
pip 2.3.4
Licence not stated
20k stars
Interactive
Needs setup

Source on GitHub · PyPI release · Markdown

Install and run

otlite install ghunt
Installs ghunt==2.3.4 into its own virtualenv. otlite lists what it will install and asks before it starts.
otlite run ghunt -- e:ada@example.com
ghunt receives ghunt email ada@example.com

No otlite yet? Install it in one line

curl -fsSL https://get.otinstaller.com/otlite | sh

Linux and macOS, no Docker. It uses your Python and pipx when both are there, and otherwise brings its own Python. About otlite · otlite docs

Before you run it

Asks questions while it runs. Run it on its own in a terminal; otlite run --all, otlite auto and playbooks skip it.
Needs a login or API key. Set it up before the first lookup; batch runs skip it unless you pass --include-credentialed.
Needs Python older than 3.14. Its dependency Pillow 10 has no wheels for 3.14 and needs the libjpeg headers to compile. otlite checks your Python before installing and says which version to use; otlite doctor lists the tools your Python can't run.

Notes

What it takes

Typed inputs after -- become Ghunt's own arguments. Anything else after -- passes through unchanged, so every option of the tool still works.

Input	With otlite	`ghunt` receives
Email`e:`	`otlite run ghunt -- e:ada@example.com`	`ghunt email ada@example.com`

What a run leaves

Every run is saved under results/ where you run otlite (or --output, or OTLITE_RESULTS_DIR): what the tool printed, a sidecar with how it ran, and an envelope.

results/ghunt/ada@example.com/<time>_ghunt_ada@example.com_<run id>.txt
results/ghunt/ada@example.com/<time>_ghunt_ada@example.com_<run id>.meta.json
results/ghunt/ada@example.com/<time>_ghunt_ada@example.com_<run id>.envelope.json

{
  "envelope": 1,
  "tool": "ghunt@2.3.4",
  "runtime": "otlite",
  "input": { "target": "ada@example.com" },
  "case": null,
  "started_at": "…", "ended_at": "…", "duration_ms": …,
  "exit_code": 0,
  "status": "complete",
  "entities": [{ "type": "url", "value": "…" }, …],
  "warnings": [],
  "output": { "path": "results/ghunt/ada@example.com/<time>_ghunt_ada@example.com_<run id>.txt", "sha256": "…", "bytes": … }
}

The envelope's shape, the same for every tool; values elided. Its entities are the emails, domains, IP addresses and URLs found in the output, or the tool's own when it prints them.

otlite results --tool ghunt

otlite extract ghunt

otlite diff ghunt ada@example.com

List the saved runs, pull out every indicator, or compare the two latest runs against the same target.

With other tools

Batch runs skip it: asks questions while it runs; run it on its own.

Related tools

All 47 tools →