h8mail

h8mail is an email OSINT and breach hunting tool designed to search for compromised email credentials across various online breach services and local breach databases. It supports inputs like direct email targets, URL parsing for emails, and local breach files, making it useful for security researchers and penetration testers investigating potential data exposures.

Use cases include reconnaissance during security assessments, verifying if specific email addresses appear in known breaches, and gathering intelligence on targets by checking against massive collections like the Breach Compilation torrent. The tool emphasizes responsible use, as indicated in its ASCII art banner.

It integrates with services for real-time breach lookups and handles local files in formats like BC_PATH or GZIP_SRC, providing outputs in standard or JSON formats for further analysis.

h8mail operates by accepting email targets, URLs to parse for emails, or queries, then querying remote breach and reconnaissance services or scanning local breach databases such as Troy Hunt’s Collection1 and Breach Compilation files. It supports pattern matching for emails from inputs or files, URL page parsing, globbing for file paths, and options for chasing related data with limits. Outputs can be directed to files or JSON, with configurations loaded from files or CLI API keys for service access.