
Regarding the collection of metadata from your Google Photos account: Then you’ll find every cookie you need, including the 4 ones.
If you don’t know how to open it, just right-click anywhere and click “Inspect Element”.
After that, open the Dev Tools window and navigate to the Storage tab (Shift + F9 on Firefox) (It’s called “Application” on Chrome). Python hunt.py I suggest you make an empty account just for this or use an account where you never login because depending on your browser/location, re-logging in into the Google Account used for the cookies can deauthorize them.
If they are valid, it will generate the Authentication token and the Google Docs & Hangouts tokens. If you don’t have cookies stored (ex: first launch), you will be asked for the 4 required cookies. Python -m pip install -r requirements.txtĪdapt the command to your operating system if needed.įor the first run and sometimes after, you’ll need to check the validity of your cookies. ⚠️ So just make sure to have Google Chrome installed. This project uses Selenium and automatically downloads the correct driver for your Chrome version.
Some Python modules are required which are contained in requirements.txt and will be installed below. Make sure you have Python 3.6.1+ installed. Īny of the scripts can be invoked through:ĭocker run -v $(pwd)/resources:/usr/src/app/resources -ti ghunt check_and_gen.pyĭocker run -v $(pwd)/resources:/usr/src/app/resources -ti ghunt hunt.py It requires the “Profile photos” album to be public (it is by default)ĭocker build –build-arg UID=$(id -u $) -t ghunt. : Since few days ago, Google return a 404 when we try to access someone’s Google Photos public albums, we can only access it if we have a link of one of his albums.Įither this is a bug and this will be fixed, either it’s a protection that we need to find how to bypass. Those marked with a (M) require the Google Maps reviews of the target to be public (they are by default). The features marked with a (P) require the target account to have the default setting of Allow the people you share content with to download your photos and videos on Picasa, or have used Picasa linked to their Google account. Activated Google services (YouTube, Photos, Maps, News360, Hangouts, etc.).
GHunt is an OSINT tool to extract information from any Google Account using an email.