GHunt is for
finding more google info like google maps reviews, a probable location, google play data if availabe when
you give a mail id, gaia id, or drive file.
I stumbled upon this tool in a blog on Phone Number OSINT.
You can find the steps to download this tool
here.
The above links should cover how to download and install GHunt. Now, what if you have only a phone
number?
There is a trick in the blog mentioned above. I will explain the process briefly, but check that blog for a
more detailed explanation.
Go to gmail login page and enter the phone number as the username. If there is an account with that number,
it should show a welcome page. Else it will show "couldn't find your google account" error.
If you get the welcome page, then right click and select "view page source", or something similar to
this.
The blog says to search for base-js here, but I found it more confusing. What I did was slightly
different.
First use word wrap to make the code more readable. Then search for "xsrf" in the code. You should find
something like this:
If you don't find this, maybe you didn't sign in and sign out to a google account before doing this as
mentioned in the blog. Or there might be some other error.
Once you get the gaia id, you can use it in GHunt with the command "ghunt gaia `gaia id here`".
Some other issues you can face are during the "ghunt login" step. The prerequisites here are you should be
logged in to your google account on the browser. You should have the GHunt Companion extension as mentioned
in the second blog. When using the extension, it will tell you that the cookie value is copied to clipboard.
You can paste it in the terminal using "ctrl+shift+v".
If you are logged out of the account in the browser afterwards, ghunt will say the cookie value is invalid.
You will need to repeat this process again then.
The results of this tool will look like this: