# Ghunt (otlite)

Offensive Google framework.

- Takes: Email
- Install: `otlite install ghunt`, into its own virtualenv
- Pinned: [ghunt==2.3.4](https://pypi.org/project/ghunt/2.3.4/)
- Command: `ghunt`
- Python: older than 3.14
- Verified: 24 Sept 2026, version 2.3.4 on Ubuntu 26.04 LTS, Python 3.12.14
- Licence: Not stated; 19,596 GitHub stars
- Source: https://github.com/mxrch/GHunt

otlite is the no-Docker edition of OTInstaller for Linux and macOS: [install it](https://otinstaller.com/otlite) with `curl -fsSL https://get.otinstaller.com/otlite | sh`.

## Run it

| Input | otlite command | Ghunt receives |
| --- | --- | --- |
| Email | `otlite run ghunt -- e:ada@example.com` | `ghunt email ada@example.com` |

Arguments after `--` that aren't typed inputs go to the tool unchanged.

## Before you run it

- **Asks questions while it runs.** Run it on its own in a terminal; `otlite run --all`, `otlite auto` and playbooks skip it.
- **Needs a login or API key.** Set it up before the first lookup; batch runs skip it unless you pass `--include-credentialed`.
- **Needs Python older than 3.14.** Its dependency Pillow 10 has no wheels for 3.14 and needs the libjpeg headers to compile. otlite checks your Python before installing and says which version to use; `otlite doctor` lists the tools your Python can't run.
- Sign in to a Google account once with `otlite run ghunt -- login` on a terminal before looking anything up.

## What a run leaves

- `results/ghunt/ada@example.com/<time>_ghunt_ada@example.com_<run id>.txt`
- `results/ghunt/ada@example.com/<time>_ghunt_ada@example.com_<run id>.meta.json`
- `results/ghunt/ada@example.com/<time>_ghunt_ada@example.com_<run id>.envelope.json`

The envelope is the same shape for every tool: the tool and version, the input, timing, exit code and status, the emails, domains, IP addresses and URLs found in the output, and the output file's path, hash and size. `otlite results --tool ghunt` lists saved runs, `otlite extract ghunt` pulls out indicators and `otlite diff ghunt ada@example.com` compares the two latest runs.

## With other tools

Batch runs skip it: asks questions while it runs; run it on its own.

## Related tools

- [Spiderfoot](https://otinstaller.com/otlite/tools/spiderfoot.md): SpiderFoot automates OSINT for threat intelligence and mapping your attack surface
- [Holehe](https://otinstaller.com/otlite/tools/holehe.md): holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function
- [Blackbird](https://otinstaller.com/otlite/tools/blackbird.md): OSINT tool to search for accounts by username and email across social networks
- [H8Mail](https://otinstaller.com/otlite/tools/h8mail.md): Email OSINT & Password breach hunting tool, locally or using premium services
- [User Scanner](https://otinstaller.com/otlite/tools/user-scanner.md): (2-in-1) Email & Username OSINT suite featuring native MCP support for deep data extraction just from a single Email/Username
- [Socialscan](https://otinstaller.com/otlite/tools/socialscan.md): Python library for accurately querying username and email usage on online platforms

[All 47 otlite tools](https://otinstaller.com/otlite/tools) · [otlite docs](https://otinstaller.com/docs/otlite.md)