Skip to content

About

Python OSINT tool to enumerate Dropbox users, extract profile metadata, and download profile photos using email addresses

Topics

Resources

Stars

1 star

Watchers

0 watching

Forks

Repository files navigation

dropbox-email-osint

Dropbox OSINT Demo

A specialized OSINT automation tool for Dropbox user enumeration using email-based reconnaissance. This utility leverages Dropbox's internal sharing search API to identify registered accounts and extract profile metadata through authenticated session requests.

Español: README en Español

Capabilities

  • Email-to-Account Resolution: Verifies if an email address is registered on Dropbox by querying the internal sharing targets API.
  • Account Information Retrieval: Extracts comprehensive profile data including:
    • Name & Email
    • Dropbox Account ID (dbid)
    • Dropbox Team ID (if applicable)
    • Profile Photo URL
    • Sort Key (internal identifier)
  • Asset Retrieval: Automatically downloads high-resolution profile photos (128x128 default).
  • Cookie-Based Authentication: Uses exported browser session cookies for authenticated API access.
  • Internationalization (i18n): Native support for English and Spanish locales.

Prerequisites

  • Python 3.8+
  • requests library
  • Cookie-Editor browser extension (Chrome/Firefox/Edge)
  • Active Dropbox account (for session cookies)

Installation

  1. Clone the repository:

    git clone https://github.com/yourusername/dropbox-email-osint.git
    cd dropbox-email-osint
  2. Install dependencies:

    pip install requests

Configuration

This tool requires valid Dropbox session cookies exported from your browser.

How to Export Cookies:

  1. Install Cookie-Editor Extension:

  2. Login to Dropbox:

  3. Export Cookies:

    • Click the Cookie-Editor extension icon
    • Click the "Export" button
    • Select "JSON" format
    • Save as dropbox_cookies.json in the project directory

Required Cookies:

The script automatically extracts these critical values from the JSON:

  • __Host-js_csrf or t → CSRF Token
  • jar → Dropbox UID & Namespace ID (Base64 encoded)
  • All session cookies from dropbox.com domain

Usage

Execute the script:

python dropbox_osint.py

Follow the prompts:

  1. Select language (Spanish/English)
  2. Enter target email address
  3. Provide path to cookies file (e.g., dropbox_cookies.json)

Example Output:

=== PROFILE INFORMATION ===
Name: John Doe
Email: john.doe@example.com
Dropbox Account ID: dbid:AAH4f9T1X7L8...
Dropbox Team ID: 
Profile Photo URL: https://dl-web.dropbox.com/account_photo/get/...
Sort Key: -----V----3--F

=== DOWNLOADING RESOURCES ===
[*] Downloading dropbox_profile_dbid_AAH4f9T1X7L8....jpg
[+] Saved: dropbox_profile_dbid_AAH4f9T1X7L8....jpg

License

MIT License

About

Python OSINT tool to enumerate Dropbox users, extract profile metadata, and download profile photos using email addresses

Topics

Resources

Stars

1 star

Watchers

0 watching

Forks

Releases

Packages

Contributors

Languages