hippiiee / osgint

OSINT tool to find informations about a github user (email2username, username2email, creation date ...)
119 stars 11 forks source link

Email Results #4

Closed Hacked-bot closed 3 months ago

Hacked-bot commented 11 months ago

Excellent OSINT tool. But I would have a request for assistance: I noticed that on a github username it returns multiple emails not assigned to the same ID. What does this mean? I noticed that the other user ID is a Stargazers of the searched ID! How should these results be interpreted? Are the two github users the same person? Thank you in advance for your response.

hippiiee commented 11 months ago

Thanks,

The multiple emails are from commits available on the repository of the user, normally your are supposed to only get emails from the user you're looking for. The result you have can mean the user spoofed an email for his commit (at the end of this WU you can see that I spoofed an email : https://hippie.cat/post/Writeup/EsaipCTF-2022/the-proof-of-the-malware-author). Or the 2 users can be the same/share the same email/share a common server from which they do their commits.

Could you send me the name of the user so I can have a look ?

Hacked-bot commented 11 months ago

Thank you for your reply! If I can send it to you privately that would be better. I also follow you on twitter! I was waiting for you to add me among your followers so I could write to you. To give you an example with fancy user IDs, I am in this situation:

Github search: user1

Result:

"IDuser1+user1@users.noreply.github.com" "IDuser1+user2 (partial)-pixel@users.noreply.github.com" "IDuser2+user2@users.noreply.github.com"

I found that the two users are contributors to the same repository and have made several commits. However, I have a doubt that it could be the same user writing commits but with two different github accounts.