Overview
The Email Search tool uses Holehe to check if an email address is registered on various online platforms and services. This tool helps investigators determine where a target email has been used to create accounts.Holehe queries over 120+ platforms including social networks, forums, dating sites, and other online services to check for email registration.
How It Works
The tool executes Holehe via subprocess and parses the output to identify platforms where the email address is registered.Technical Implementation
Fromemail_holehe/views.py:35-40:
Result Parsing
The tool parses Holehe’s output looking for lines with[+] markers that indicate a successful match:
Usage
Enter Email Address
Navigate to the Email Search page and input the target email address in the search form.The tool validates the email format using regex:
^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$Execute Search
Click the search button to initiate the Holehe scan. The search has a 60-second timeout.The tool will:
- Execute Holehe with the
--only-usedflag (shows only platforms where the email exists) - Parse the results in real-time
- Store results in the session
API Endpoints
Defined inemail_holehe/urls.py:
| Endpoint | View Function | Purpose |
|---|---|---|
/search/ | search_email | Display search form and process submissions |
/results/ | search_results | Display search results from session |
Results Format
Results are stored in the session and formatted as:Validation
Must be a valid email address format. The tool performs regex validation before executing the search.
Error Handling
Technical Details
Session Storage
Fromemail_holehe/views.py:42-45:
Holehe Path Resolution
The tool attempts to locate Holehe in multiple locations:- Virtual environment bin directory
- System-wide installation
- Fallback to global command
Limitations
Use Cases
- Account Discovery: Find all accounts associated with an email address
- Digital Footprint Analysis: Map an individual’s online presence
- Investigation Research: Identify platforms for further investigation
- Breach Correlation: Cross-reference with known data breaches
- Social Media Profiling: Discover social network accounts
