Collect email breach history, paste exposures, and social account existence.
npx skills add https://github.com/woohyun212/security-skill --skill osint-email
Please help me install this Agent Skill. Skill: osint-email Source: https://github.com/woohyun212/security-skill/tree/main/osint-email Command: npx skills add https://github.com/woohyun212/security-skill --skill osint-email
Reduces manual, error-prone effort required to determine whether an email address has been exposed in data breaches, appeared in paste sites, or has linked social/service accounts, enabling faster risk assessment and informed decision-making.
Run the osint-email skill to validate [email protected], check Have I Been Pwned for breaches and pastes, verify MX records, and optionally enumerate social accounts.
High-intent search queries and answers about installing and using this skill.
To check an email address for data breach exposures, this Skill queries the Have I Been Pwned API to enumerate breach histories and paste site appearances, while also validating email formats and verifying MX DNS records for mail delivery.
OSINT email reconnaissance is the collection of breach history and social account existence for a target address. You need it during security assessments, pre-phishing simulation checks, employee exposure audits, and incident response digital footprint analysis.
Yes, performing Have I Been Pwned breach and paste lookups requires a HIBP API key. Additionally, executing optional holehe social enumeration requires installed utilities like curl and holehe on your system.
You can enumerate social accounts linked to an email address using the holehe utility, which maps public account presence across services. This optional social enumeration runs alongside Have I Been Pwned breach checks and MX DNS inspection.
Yes, you can verify if an email domain accepts mail delivery by performing MX DNS inspection. This checks the domain's Mail Exchange records to confirm whether the target address can receive messages before querying external breach services.
Limitations of email OSINT include requiring a HIBP API key for breach checks and installed holehe for social enumeration. Results depend on external service availability and only reflect public account presence without accessing private profile data.
jackquelinunpredictable827Search and validate Saudi National Addresses via the National Address API.
betobeticoGuide personal data breach response with RGPD notification checklists and templates.
julianobarbosaSynchronize Kubernetes DNS records with external providers via External-DNS.
EntroVyxEnumerate registered usernames across hundreds of social media platforms.
