________ ______ ___________________ ___ ___ ____ __ __
/ ____/ / / / __ \/ ___/_ __/ ____/ |/ / / | / __ \/ //_/
/ / __/ /_/ / / / /\__ \ / / / __/ / /|_/ / / /| | / /_/ / ,<
/ /_/ / __ / /_/ /___/ // / / /___/ / / / / ___ |/ _, _/ /| |
\____/_/ /_/\____//____//_/ /_____/_/ /_/ /_/ |_/_/ |_/_/ |_|
Open Source Intelligence. Reimagined.
"Information is the most powerful weapon. Reconnaissance is the first step."
GHOSTMARK is a fast, multi-threaded OSINT suite for username reconnaissance and email intelligence. Built for researchers, security professionals, and anyone who needs answers fast — no fluff, no bloat.
| Module | What you get |
|---|---|
| 🔍 Username Hunt | Scan 30+ platforms concurrently — social media, tech, creative, forums |
| 📧 Email Intel | Breach detection, Gravatar identity linking, MX record validation |
| ⚡ Speed | ThreadPoolExecutor-powered — results in seconds, not minutes |
| 🧠 Smart | Handles redirects, honeypot pages, and custom 404s to cut false positives |
git clone https://github.com/Linuxthecoder/ghostmark.git
cd ghostmark
pip install -r requirements.txtRequires Python 3.8+ — works on Linux, Windows, and macOS.
python main.py [OPTIONS]| Flag | Description |
|---|---|
-u, --username |
Hunt a username across 30+ sites |
-e, --email |
Run full email analysis (breach check + MX + Gravatar) |
-a, --api |
Set HaveIBeenPwned API key for deep breach lookup |
-h, --help |
Show help |
# Username recon
python main.py -u "target_handle"
# Email analysis (free tier via LeakCheck.io)
python main.py -e "target@example.com"
# Deep email analysis (HaveIBeenPwned)
python main.py -e "target@example.com" -a YOUR_HIBP_KEYGHOSTMARK uses a hybrid model — free tier first, paid tier for depth:
graph TD
A[Email Input] --> B[LeakCheck.io]
A --> C[Gravatar Lookup]
A --> D[MX Validation]
B --> E{Found?}
E -- Yes --> F[Display Source List]
A --> G[HaveIBeenPwned API]
G --> H[Deep Breach Data]
- Linux — shebang support included, run directly with
./main.py - Windows — ASCII-safe rendering, no encoding errors
- Both — no asyncio event loop complexity, pure threading
GHOSTMARK is intended for educational use and authorized security research only. Do not use this tool against systems or individuals without explicit permission. The author accepts no responsibility for misuse.
Built by ByteSpecter | MIT License | Contributing