h8mail is an open source email OSINT and password breach hunting tool designed to help security professionals investigate compromised credentials associated with email addresses. It works by querying multiple breach and reconnaissance services to identify whether an email address has appeared in publicly leaked datasets. The tool can also search locally stored breach dumps, such as Troy Hunt’s “Collection1” or the widely known “Breach Compilation,” allowing investigators to analyze large credential datasets offline. h8mail aggregates information from these sources and organizes the results to help analysts quickly understand where and how an email address has been exposed. In addition to external services, it can integrate with premium APIs and data providers for more advanced breach intelligence capabilities. The tool is commonly used by penetration testers, OSINT investigators, and security researchers to detect compromised accounts and investigate credential leaks.
Features
- Searches multiple breach and reconnaissance services for compromised emails
- Supports analysis of local breach dumps such as Collection1 and Breach Compilation
- Email pattern matching using regular expressions for flexible targeting
- Ability to chase and discover related email addresses during investigations
- Bulk processing of targets from files and automated result aggregation
- Export results to formats such as CSV or JSON for further analysis