mailcat

<p align="center"> <img src="https://github.com/sharsil/mailcat/blob/main/logo.png?raw=true" height="200"/> </p>

---

The only cat who can find existing email addresses by nickname.

Usage

First install requirements:

pip3 install -r requirements.txt

Then just run the script:

./mailcat.py username

It's recommended to run script through Tor or proxy. You can use internal Tor routing (--tor) or proxychains. Examples:

./mailcat.py --tor username
proxychains4 -q python3 mailcat.py username

./mailcat.py username --proxy http://1.2.3.4:8080

Supported providers

Total 37 providers, > 170 domains and > 100 aliases.

| Name | Domains | Method | | ------------------- | -------------------------------------- | ----------------- | | Gmail | gmail.com | SMTP | | Yandex | yandex.ru + 5 aliases | SMTP | | Protonmail | protonmail.com + 2 aliases | API | | iCloud | icloud.com, me.com, mac.com | Access recovery | | MailRu | mail.ru + 4 other domains | Registration | | Rambler | rambler.ru + 5 other domains | Registration | | Tutanota | tutanota.com + 4 other domains | Registration | | Yahoo | yahoo.com | Registration | | Outlook | outlook.com, hotmail.com | Registration | | Zoho | zohomail.com | Registration | | Lycos | lycos.com | Registration | | Eclipso | eclipso.eu + 9 other domains | Registration | | Posteo | posteo.net + 50 aliases | Registration | | Mailbox.org | mailbox.org | Registration | | Firemail | firemail.de + 2 other domains | Registration | | Fastmail | fastmail.com | Registration | | StartMail | startmail.com | Registration | | KOLABNOW | kolabnow.com + 23 aliases | Registration | | bigmir)net | i.ua, ua.fm, email.ua | Registration | | Xmail | xmail.net | Registration | | Ukrnet | ukr.net | Registration | | Runbox | runbox.com + 30 other domains | Registration | | DuckGo | duck.com | Registration | | HushMail | hushmail.com + 5 other domains | Registration | | CTemplar | ctemplar.com | Registration | | emailn | emailn.de | Registration | | aikq | aikq.de + 40 other domains | Registration | | Vivaldi | vivaldi.net | Registration | | mailDe | mail.de | SMTP | | Wirtualna Polska | wp.pl | Registration | | Gazeta.pl | gazeta.pl | Registration | | int.pl | int.pl | Registration | | O2 | o2.pl | Registration | | Interia | interia.pl + 10 other domains | Password recovery | | t.pl | t.pl + 8 other domains | Registration | | onet.pl | onet.pl + 11 other domains & 4 aliases | Registration |

Troubleshooting

Use -m or --max-connections if you get connection errors (Mailcat do 10 parallel connections max by default).

SOWEL classification

This tool uses the following OSINT techniques:

• SOTL-2.2. Search For Accounts On Other Platforms
• SOTL-6.1. Check Logins Reuse To Find Another Account
• SOTL-6.2. Check Nicknames Reuse To Find Another Account

Mentions and articles

OSINTEditor Sunday Briefing: Sensational Headlines and Kuomintang Chairmanship Elections

Michael Buzzel: 237 - The Huge OSINT Show by The Privacy, Security, & OSINT Show

bellingcat: First Steps to Getting Started in Open Source Research

OS2INT verifying email addresses using Mailcat

hwosint - Twitter post