search

N0rz3 / Eyes

🕵️ Email osint tool
GNU General Public License v3.0
375 stars 47 forks source link

Protonmail API #4

Open C3n7ral051nt4g3ncy opened 1 year ago

C3n7ral051nt4g3ncy commented 1 year ago

The way in which your script verifies if a Protonmail address is valid does not work anymore. The Proton API is broken.

Try it out with any protonmail address and the API will always return a positive match for an email that does not exist --> https://api.protonmail.ch/pks/lookup?op=index&search=oiezjaodfvdfvdfvssdfvdfvsdfiehjveiovuhzervui@protonmail.com

This is why the tool Protosint by PixelBubble is broken and has been broken for a long time. It's also why I updated my own script --> https://github.com/C3n7ral051nt4g3ncy/Prot1ntelligence

N0rz3 commented 1 year ago

Thank you for warning me about this flaw, but how can I check if the email address really exists??

C3n7ral051nt4g3ncy commented 1 year ago

@N0rz3 If you have a Protonmail account, you can type the email and check if you see the padlock See example where I put the email from above, and a real email that exists. Check out the script from @Kr0wZ / https://github.com/Kr0wZ/NeutrOSINT He found a way to check.

N0rz3 commented 1 year ago

ok thanks i will check later