🏛️ hera

Map the public digital footprint of an email address or username across dozens of platforms.

Warning

this tool is designed strictly for personal digital footprint audits, security research, or explicitly authorized investigations. Only investigate targets for which you have received proper authorization.

modules

Category	Services / Tools
identity/email	Google Account (via GHunt), ProtonMail, Gravatar, WordPress
phone	Number validation, country/carrier/line-type lookup, WhatsApp & Telegram registration check
dev platforms	GitHub, GitLab, Bitbucket, npm, Docker Hub, HackerNews
socials	Snapchat, Facebook, multi-site username sweep (~40 sites via blackbird), holehe
gaming/medias	Steam, EA, Nexon, Chess.com, Lichess, Mojang/Minecraft, Roblox, Pokemon Showdown, Xbox Gamertag, stats.fm, Spotify, Duolingo, Vivino, Academia.edu, XVideos, Picsart, Imageshack, Smule
creative/writing	Trello, Wattpad
isps	French ISPs (Orange, SFR, Canal+)
breaches	Infostealer logs & breach intelligence via Hudson Rock, breach names via LeakCheck

install

git clone https://github.com/saladandonionrings/Hera
cd Hera
pip3 install -r requirements.txt

configuration

copy .env.example to .env and fill in your own values.

Variable	Purpose	Required
GITHUB_TOKEN	Raises GitHub API rate limits	no
KEYAPI_KEY	keyapi.ai bearer token - more reliable Pinterest/Instagram/X (Twitter) profile lookups (avatar, name, bio, stats) than the built-in scraping fallback	no
GOOGLE_CLIENT_ID / GOOGLE_PROJECT_ID / GOOGLE_CLIENT_SECRET	Your own OAuth client for the Google profile-photo feature, create one at console.cloud.google.com/apis/credentials (type: Desktop app)	no*
FACEBOOK_LSD_TOKEN / ESPN_API_KEY	Override the built-in defaults if the platforms rotate them	no
TELEGRAM_API_ID / TELEGRAM_API_HASH	Your own Telegram API app : create one at my.telegram.org/apps	no**

* without the Google OAuth variables, identity lookup via GHunt still works; only the profile-photo fetch is skipped.

** without TELEGRAM_API_ID/TELEGRAM_API_HASH, phone scans still run; only the Telegram check is skipped.

use

cli

# a email address
python3 main.py target@example.com

# a username
python3 main.py someusername

# a phone number
python3 main.py +33612345678

# usernames / emails / phone numbers from file
python3 main.py -f targets.txt

webapp

python3 app.py

-> http://localhost:8000

ghunt auth

the Google Identity module requires an authenticated GHunt session to operate correctly.

ghunt login

troubleshoot ghunt : KeyError: 'container'

python3 scripts/patch_ghunt.py

telegram auth (optional, phone module)

only needed once, to enable the Telegram registration check on phone number scans.

python3 scripts/telegram_login.py