Skip to content

GmailEnum

Ellis Springe edited this page Mar 31, 2022 · 2 revisions

Plugin Overview

The GmailEnum module is for targeting GSuite instances, regardless of if the login itself is a separate IDP.

This plugin does not make an authentication request, it is solely user enumeration

This module was based off x0rz's Gmail user enumeration technique, found here: https://blog.0day.rocks/abusing-gmail-to-get-previously-unlisted-e-mail-addresses-41544b62b2.

Unique Command Line Options

None

Throttle Notes

Unknown throttle limitations.

Example Command

python3 credmaster.py --access_key <key> --secret_access_key <key> \
    --plugin gmailenum \
    -u userfile.txt -a useragents.txt -o outputfile \
Clone this wiki locally