PwnedOrNot : OSINT Tool To Find Passwords For Compromised Email Addresses

pwnedOrNot uses haveibeenpwned v2 api to test email accounts and tries to find the password in Pastebin Dumps. Haveibeenpwned offers a lot of information about the compromised email, some useful information is displayed by this script:

  • Name of Breach
  • Domain Name
  • Date of Breach
  • Fabrication status
  • Verification Status
  • Retirement status
  • Spam Status

And with all this information it can easily find passwords for compromised emails if the dump is accessible and it contains the password

Tested on

  • Kali Linux 2019.1
  • BlackArch Linux
  • Ubuntu 18.04
  • Kali Nethunter
  • Termux

Also Read – Iris : WinDbg Extension To Display Windows Process Mitigations

Installation

Ubuntu / Kali Linux / Nethunter / Termux

git clone https://github.com/thewhiteh4t/pwnedOrNot.git
cd pwnedOrNot
pip3 install requests

BlackArch Linux

pacman -S pwnedornot

Updates

cd pwnedOrNot
git pull

Usage

python3 pwnedornot.py -h

Usage: pwnedornot.py [-h] [-e EMAIL] [-f FILE] [-d DOMAIN] [-n] [-l]
[-c CHECK]

Optional arguments:
-h, –help show this help message and exit
-e EMAIL, –email EMAIL Email Address You Want to Test
-f FILE, –file FILE Load a File with Multiple Email Addresses
-d DOMAIN, –domain DOMAIN Filter Results by Domain Name
-n, –nodumps Only Check Breach Info and Skip Password Dumps
-l, –list Get List of all pwned Domains
-c CHECK, –check CHECK Check if your Domain is pwned

==> Examples

==> Check Single Email
python3 pwnedornot.py -e
==> OR
python3 pwnedornot.py –email

==> Check Multiple Emails from File
python3 pwnedornot.py -f
==> OR
python3 pwnedornot.py –file

==> Filter Result for a Domain Name [Ex : adobe.com]
python3 pwnedornot.py -e -d
==> OR
python3 pwnedornot.py -f –domain

==> Get only Breach Info, Skip Password Dumps
python3 pwnedornot.py -e -n
==> OR
python3 pwnedornot.py -f –nodumps

==> Get List of all Breached Domains
python3 pwnedornot.py -l
==> OR
python3 pwnedornot.py –list

==> Check if a Domain is Pwned
python3 pwnedornot.py -c
==> OR
python3 pwnedornot.py –check

Video Tutorial

R K

Recent Posts

WhatsMyName App – Find Anyone Across 640+ Platforms

Overview WhatsMyName is a free, community-driven OSINT tool designed to identify where a username exists…

4 days ago

Analyzing Directory Size Linux Tools Explained

Managing disk usage is a crucial task for Linux users and administrators alike. Understanding which…

5 days ago

Understanding Disk Usage with du Command

Efficient disk space management is vital in Linux, especially for system administrators who manage servers…

5 days ago

How to Check Directory Size in Linux

Knowing how to check directory sizes in Linux is essential for managing disk space and…

5 days ago

Essential Commands for Linux User Listing

Managing user accounts is a core responsibility for any Linux administrator. Whether you’re securing a…

5 days ago

Command-Line Techniques for Listing Linux Users

Linux offers powerful command-line tools for system administrators to view and manage user accounts. Knowing…

5 days ago