Holehe

By on

 

Image showing Holehe logo.

In this blog:

  • What is Holehe?
  • Installation.
  • Usage.


What is Holehe?

Holehe matches email addresses with registered accounts online.

Checks over 120 websites and does not alert the target email.

 

Works on Python3 so make sure you have Python3 and Pip installed on your system.

 

Can be run from Termux, Windows or any Linux system that has Python3 installed.


Image showing Holehe GitHub page.
Holehe domains. Click to see more.




Installation

Click here to check out the GitHub page where you can download it ➡️

https://github.com/megadose/holehe.

 

We want to use the following command in PowerShell as administrator ➡️ 

git clone https://github.com/megadose/holehe.git to clone into the ‘Holehe’ repository.


Image showing Linux command.
Cloning GitHub repository for Holehe.


We can now CD into the Holehe directory to use it. 


Holehe directory.



Usage

We can now install setup.py which will allow us to use the tool.


We end up getting this error.


Image showing Linux command.
Error number 13.

Try the command again but with sudo privileges this time.


Image showing Linux command.
Sudo privileges used.

Trying the help command for Holehe shows that the install didn't work as the modules required cannot be found. 


Image showing Linux command.
Errors showing modules not installed.




Instead of downloading Holehe with GitHub, I will download it with PyPi.

 

Type pip3 install holehe.


Image showing Linux command.
Holehe pip install command.

Typing holehe --help now shows the manual page which means all dependencies were in fact installed on the system.


Image showing Linux command.
Holehe help page.


Trying the command holehe test@gmail.com gives us possible matches. 


Image showing Linux command.
Holehe finding websites.


Image showing Linux command.
121 domains scanned by Holehe.


Shone is a Cyber Security student at the Manchester Metropolitan University. Shone started writing blogs to document his own learning and help others along the way.

Comments

Post a Comment

Popular posts from this blog

Setting up Metasploitable lab

By on
Image
  In this blog: What is Metsploitable? Downloading Metasploitable on Virtual Machine. Inside Metasploitable. What's next? This blog is one of a 4 part series in Metasploitable. Click here to see how to run a DOS attack on Metasploitable. Click here to see how to deface Metasploitable's webpage. Click here to see how to fix a common timer error that occurs during bootup .  Click here to see how to connect Metasploitable with Kali Linux . What is Metasploitable? Metasploitable is an intentionally vulnerable Linux based virtual machine that is used to train pentesters and security professionals.   As mentioned, the machine is vulnerable to attacks that are not possible to execute on modern systems and is solely for educational purposes.  Metasploitable should not be able to face the public network due to its vulnerability.  Downloading Metasploitable on Virtual Machine Download Metasploitable2 here ➡️  https://sourceforge.net/projects/metasploitable/ ...
Read more

VeraCrypt

By on
Image
  In this blog: What is VeraCrypt? Installation. Creating an encrypted file container. Mounting devices. Inside locked-container. What is VeraCrypt? This is a continuation of the Steghide walkthrough - found here ➡️   https://shonepcyber.blogspot.com/2023/08/steghide-linux.html   VeraCrypt can be downloaded on Mac, Windows, and most other Linux based operating systems.   It is a free and open source disk encryption program.   VeraCrypt can create virtual encrypted disks, encrypt partitions, or encrypt the entire storage device with pre-boot authentication.   Uses enhanced security in algorithms which makes it fairly immune to advancements in brute force attacks.   The latest Linux tarball of VeraCrypt can be found at https://www.veracrypt.fr/en/Downloads.html . ➡️ VeraCrypt website. Installation Start the program once it has been downloaded. The software downloaded into my...
Read more

Tripwire

By on
Image
  In this blog: What is Tripwire? Mirrors. Installation. Initialise Tripwire. Edit twpol.txt. File integrity check. Securing our system. Email notifications.   See my blog on Intrusion Detection systems here. What is Tripwire? Tripwire is a popular open-source Linux IDS that's used for file integrity monitoring -- Basically checking for unauthorised changes to your files.  I will be using Kali Linux, which is a Debian based distro. Tripwire is part of the default repository in Ubuntu and Debian, meaning we can install it using commands in the terminal. Mirrors Before installing the tool, we must update the list of packages in the repos, which is used by the apt tool to determine the URL of the package to install.  Run ➡️  sudo apt-get update Without updating, the download manager might not be able to find the URL as the list could be out of date.  This is not a requirement if you know that the specific package you want has not been altered (no new version o...
Read more