buster: An advanced tool for email reconnaissance

Buster is an advanced OSINT tool used to:

• Get social accounts of an email using multiple sources(gravatar,about.me, myspace, skype,github,linkedin, previous breaches)
• Get links to where the email was found using google, twitter, darksearch and paste sites
• Get breaches of an email
• Get domains registered with an email (reverse whois)
• Generate possible emails and usernames of a person
• Find the email of a social media account
• Find emails from a username
• Find the work email of a person

Install

$ git clone git://github.com/sham00n/buster
$ cd buster/
$ python setup.py install
$ buster -h

This project uses hunter.io to get information from company emails, the first couple “company email” searches dont require a key, if you have an interest in company emails I recommend that you sign up for an account on hunter.io.

Once you get an API key, add it to the file “api-keys.yaml” and rerun the command:

$ python setup.py install

Use

Examples

Get info of a single email(exists or not, social media where email was used, data breaches, pastes and links to where it was found)

The query for a list of emails`

Generate emails that match the pattern and checks if they exist or not(use the -a argument if you have more info to add(ex: -a nickname fav_color phone #)

Generate usernames (use with -o option and input the file to recon-ng’s profiler module)

Generate emails (use -v if you want to validate and get info of each email)

Generate 100+ emails in the format username@provider.com and returns the valid ones(use -p if you dont want all 100+)

Generate a company email and returns info associated with it

Tips

• You get 200 email validations/day, use them wisely!
• When using the -a option, avoid using small words(ex:j,3,66), the shorter the words are the bigger the email list is and therefore more validations are needed
• when adding an email pattern make sure the service providing the pattern displays it with the right size(facebook, twitter, Instagram do…others might not)
• I dont recommend using with Tor as haveibeenpwnd.com,hunter.io and Google won’t function properly

Copyright (C) 2019 sham00n

Source: https://github.com/sham00n/