Pwndb : Search For Leaked Credentials

Pwndb is a python command-line tool for searching leaked credentials using the Onion service with the same name.

Usage

usage: pwndb.py [-h] [–target TARGET] [–list LIST] [–output OUTPUT]
optional arguments:
-h, –help show this help message and exit
–target TARGET Target email/domain to search for leaks.
–list LIST A list of emails in a file to search for leaks.
–output OUTPUT Return results as json/txt

Note: tor service must be up and running to connect to it on port 9050

Also Read : Windows 95 : Windows 95 in Electron That Runs on macOS, Linux, and Windows

Installation

Just create a virtualenv, install the requirements and make sure Tor is running.

$ git clone https://github.com/davidtavarez/pwndb
Cloning into ‘pwndb’…
remote: Enumerating objects: 10, done.
remote: Counting objects: 100% (10/10), done.
remote: Compressing objects: 100% (9/9), done.
remote: Total 10 (delta 2), reused 4 (delta 0), pack-reused 0
Unpacking objects: 100% (10/10), done.
$ cd pwndb
$ virtualenv venv
New python executable in /Users/davidtavarez/pwndb/venv/bin/python
Installing setuptools, pip, wheel…done.
$ source venv/bin/activate
(venv) $ pip install -r requirements.txt
Collecting PySocks==1.6.8 (from -r requirements.txt (line 1))

(venv) $ python pwndb.py -h
usage: pwndb.py [-h] [–target TARGET] [–list LIST] [–output OUTPUT]
optional arguments:
-h, –help show this help message and exit
–target TARGET Target email/domain to search for leaks.
–list LIST A list of emails in a file to search for leaks.
–output OUTPUT Return results as json/txt

Disclaimer

Usage of pwndb.py for attacking targets without prior mutual consent is illegal. It is the end user’s responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused.

R K

Recent Posts

Kali Linux Commands Cheat Sheet: Complete Quick Reference

This cheat sheet covers the essential Kali Linux commands every pentester and ethical hacker uses…

1 week ago

What I Wish I Knew Before Learning Malware Analysis and Reverse Engineering

When I first started learning malware analysis and reverse engineering, I thought the hardest part…

2 weeks ago

git fetch vs git pull: How They Work and When to Use Each

Both git fetch and git pull talk to a remote repository, but they do very different things to your…

3 weeks ago

git cherry-pick Command: Apply Commits from Another Branch

Sometimes the change you need already exists, just on the wrong branch. A hotfix lands…

3 weeks ago

Best Email APIs for Secure Business Email: Why Developers Are Moving Beyond SMTP

Email is still one of the most important communication channels inside modern applications. Password resets,…

3 weeks ago

Nginx Commands in Linux: Start, Stop, Reload, Test, and Log

Nginx is a high-performance web server and reverse proxy trusted by some of the largest…

4 weeks ago