khast3x/h8mail is a security-focused project on GitHub with 5.2k stars, written primarily in Python. Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email
Snapshot summary built from the project's own GitHub metadata — there's no written TopGit review yet. The page will update automatically when a full review is published.
WHY NO REVIEW YET
TopGit writes full reviews for the most-starred, most-requested repositories. This page is a snapshot until then — see the READ ME tab for the original README in full.
h8mail is an email OSINT and breach hunting tool using different breach and reconnaissance services, or local breaches such as Troy Hunt's "Collection1" and the infamous "Breach Compilation" torrent.
:book: Table of Content
Table of Content
Features
APIs
Usage
Usage examples
Thanks & Credits
Related open source projects
:tangerine: Features
:mag_right: Email pattern matching (reg exp), useful for reading from other tool outputs
:earth_africa: Pass URLs to directly find and target emails in pages
:dizzy: Loosey patterns for local searchs ("john.smith", "evilcorp")
:package: Painless install. Available through pip, only requires requests
:white_check_mark: Bulk file-reading for targeting
:memo: Output to CSV file or JSON
:muscle: Compatible with the "Breach Compilation" torrent scripts
:house: Search cleartext and compressed .gz files locally using multiprocessing
:cyclone: Compatible with "Collection#1"
:fire: Get related emails
:dragon_face: Chase related emails by adding them to the ongoing search
:crown: Supports premium lookup services for advanced users
:factory: Custom query premium APIs. Supports username, hash, ip, domain and password and more
:books: Regroup breach results for all targets and methods
:eyes: Includes option to hide passwords for demonstrations
:rainbow: Delicious colors
:package: pip3 install h8mail
APIs
Service
Functions
Status
HaveIBeenPwned(v3)
Number of email breaches
:white_check_mark: :key:
HaveIBeenPwned Pastes(v3)
URLs of text files mentioning targets
:white_check_mark: :key:
Hunter.io - Public
Number of related emails
:white_check_mark:
Hunter.io - Service (free tier)
Cleartext related emails, Chasing
:white_check_mark: :key:
Snusbase - Service
Cleartext passwords, hashs and salts, usernames, IPs - Fast :zap:
:white_check_mark: :key:
Leak-Lookup - Public
Number of search-able breach results
:white_check_mark: (:key:)
Leak-Lookup - Service
Cleartext passwords, hashs and salts, usernames, IPs, domain
:white_check_mark: :key:
Emailrep.io - Service (free)
Last seen in breaches, social media profiles
:white_check_mark: :key:
scylla.so - Service (free)
Cleartext passwords, hashs and salts, usernames, IPs, domain
:construction:
Dehashed.com - Service
Cleartext passwords, hashs and salts, usernames, IPs, domain
Cleartext passwords, hashs and salts, usernames, domain
:construction: :key:
:key: - API key required
:tangerine: Usage
usage: h8mail [-h] [-t USER_TARGETS [USER_TARGETS ...]]
[-u USER_URLS [USER_URLS ...]] [-q USER_QUERY] [--loose]
[-c CONFIG_FILE [CONFIG_FILE ...]] [-o OUTPUT_FILE]
[-j OUTPUT_JSON] [-bc BC_PATH] [-sk]
[-k CLI_APIKEYS [CLI_APIKEYS ...]]
[-lb LOCAL_BREACH_SRC [LOCAL_BREACH_SRC ...]]
[-gz LOCAL_GZIP_SRC [LOCAL_GZIP_SRC ...]] [-sf]
[-ch [CHASE_LIMIT]] [--power-chase] [--hide] [--debug]
[--gen-config]
Email information and password lookup tool
optional arguments:
-h, --help show this help message and exit
-t USER_TARGETS [USER_TARGETS ...], --targets USER_TARGETS [USER_TARGETS ...]
Either string inputs or files. Supports email pattern
matching from input or file, filepath globing and
multiple arguments
-u USER_URLS [USER_URLS ...], --url USER_URLS [USER_URLS ...]
Either string inputs or files. Supports URL pattern
matching from input or file, filepath globing and
multiple arguments. Parse URLs page for emails.
Requires http:// or https:// in URL.
-q USER_QUERY, --custom-query USER_QUERY
Perform a custom query. Supports username, password,
ip, hash, domain. Performs an implicit "loose" search
when searching locally
--loose Allow loose search by disabling email pattern
recognition. Use spaces as pattern seperators
-c CONFIG_FILE [CONFIG_FILE ...], --config CONFIG_FILE [CONFIG_FILE ...]
Configuration file for API keys. Accepts keys from
Snusbase, WeLeakInfo, Leak-Lookup, HaveIBeenPwned,
Emailrep, Dehashed and hunterio
-o OUTPUT_FILE, --output OUTPUT_FILE
File to write CSV output
-j OUTPUT_JSON, --json OUTPUT_JSON
File to write JSON output
-bc BC_PATH, --breachcomp BC_PATH
Path to the breachcompilation torrent folder. Uses the
query.sh script included in the torrent
-sk, --skip-defaults Skips Scylla and HunterIO check. Ideal for local scans
-k CLI_APIKEYS [CLI_APIKEYS ...], --apikey CLI_APIKEYS [CLI_APIKEYS ...]
Pass config options. Supported format: "K=V,K=V"
-lb LOCAL_BREACH_SRC [LOCAL_BREACH_SRC ...], --local-breach LOCAL_BREACH_SRC [LOCAL_BREACH_SRC ...]
Local cleartext breaches to scan for targets. Uses
multiprocesses, one separate process per file, on
separate worker pool by arguments. Supports file or
folder as input, and filepath globing
-gz LOCAL_GZIP_SRC [LOCAL_GZIP_SRC ...], --gzip LOCAL_GZIP_SRC [LOCAL_GZIP_SRC ...]
Local tar.gz (gzip) compressed breaches to scans for
targets. Uses multiprocesses, one separate process per
file. Supports file or folder as input, and filepath
globing. Looks for 'gz' in filename
-sf, --single-file If breach contains big cleartext or tar.gz files, set
this flag to view the progress bar. Disables
concurrent file searching for stability
-ch [CHASE_LIMIT], --chase [CHASE_LIMIT]
Add related emails from hunter.io to ongoing target
list. Define number of emails per target to chase.
Requires hunter.io private API key if used without
power-chase
--power-chase Add related emails from ALL API services to ongoing
target list. Use with --chase
--hide Only shows the first 4 characters of found passwords
to output. Ideal for demonstrations
--debug Print request debug information
--gen-config, -g Generates a configuration file template in the current
working directory & exits. Will overwrite existing
h8mail_config.ini file
The most recent commit recorded on khast3x/h8mail was 3.0 years ago, based on the GitHub push timestamp. The repository has 608 forks — one of the better signals of community interest.
How does khast3x/h8mail compare to other Security projects?
khast3x/h8mail is tracked by TopGit in the Security category, with 5.2k GitHub stars and written in Python. Browse the Security topic page on TopGit to compare it against similar projects by stars and activity.
How many stars does khast3x/h8mail have?
khast3x/h8mail has 5.2k GitHub stars — refresh the page for the live number, or check github.com/khast3x/h8mail. TopGit mirrors GitHub's count but does not claim minute-by-minute accuracy.
What is khast3x/h8mail?
khast3x/h8mail (khast3x/h8mail) is a Python project on GitHub. From the project's own README: Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email
What language is khast3x/h8mail written in?
khast3x/h8mail is written primarily in Python. GitHub's language field is based on the largest share of bytes in the default branch.
TopGit places khast3x/h8mail in the Security category based on its GitHub topics and description (tagged: "breach", "breach-compilation", "email"). Categories are assigned from real repository metadata, not editorial guesswork.
Read full README in the tab above.
Curious whether h8mail is right for you?
Let ChatGPT, Claude, or Perplexity look into it — click below and see what AI actually says about h8mail.
/h8mail
