h8mail is an open-source intelligence tool for searching leaked credentials and compromised accounts across remote APIs and local data dumps. It functions as a credential leak hunter and email reconnaissance framework designed to identify exposed passwords and sensitive information using usernames, domains, IP addresses, and email hashes.
The tool distinguishes itself through a recursive target expansion system that feeds newly discovered email addresses back into the search queue to broaden the scope of investigations. It also includes a local breach data parser that employs multiprocessing to scan large cleartext and compressed credential files stored on the local filesystem.
Broad capabilities cover digital footprint mapping and threat intelligence gathering. The system supports multi-criteria lookups, domain breach scanning, and the extraction of email addresses from web URLs. Findings can be exported in JSON and CSV formats for external analysis, while sensitive output is obfuscated in the terminal to prevent the exposure of full credentials.