pywhat
« Back to VersTracker
Description:
Identify anything: emails, IP addresses, and more
Type: Formula  |  Tracked Since: Dec 28, 2025
Links: Homepage  |  formulae.brew.sh
Category: Security
Tags: osint forensics security cli python
Install: brew install pywhat
About:
PyWhat is a versatile OSINT tool that identifies and categorizes various data types like emails, IP addresses, and cryptocurrency wallets from raw text. It provides detailed context and metadata about the identified artifacts, making it invaluable for forensic analysis and data recovery. Its primary value lies in its ability to instantly make sense of unstructured data.
Key Features:
  • Identifies diverse data types including IPs, emails, and crypto wallets
  • Provides detailed context and metadata for findings
  • Filterable output based on tag and type
  • Works on files, folders, and raw text input
Use Cases:
  • Digital forensics and incident response (DFIR)
  • CTF (Capture The Flag) challenge solving
  • Scanning logs for sensitive data leaks
  • Analyzing malware artifacts
Alternatives:
  • TruffleHog – TruffleHog focuses on finding secrets in git history, whereas PyWhat is a general-purpose identifier for any string.
  • RegexCheck – RegexCheck is specific to regex validation, while PyWhat automatically detects and classifies the data type.
Version History
Detected Version Rev Change Commit