PwnedOrNot : OSINT Tool to Find Passwords for Compromised Email Addresses

PwnedOrNot is a OSINT tool to find passwords for compromised email addresses. pwnedOrNot uses haveibeenpwned v2 api to test email accounts and tries to find the password in Pastebin Dumps.

Features

haveibeenpwned offers a lot of information about the compromised email, some useful information is displayed by this script:

  • Name of Breach
  • Domain Name
  • Date of Breach
  • Fabrication status
  • Verification Status
  • Retirement status
  • Spam Status

And with all this information pwnedOrNot can easily find passwords for compromised emails if the dump is accessible and it contains the password.

Also Read – ARDT : Akamai Reflective DDoS Tool

Tested on

  • Kali Linux 18.2
  • Ubuntu 18.04
  • Kali Nethunter
  • Termux

Installation

Ubuntu / Kali Linux / Nethunter / Termux

chmod 777 install.sh
./install.sh

Usage

python3 pwnedornot.py -h

usage: pwnedornot.py [-h] [-e EMAIL] [-f FILE] [-d DOMAIN] [-n] [-l]
[-c CHECK]

optional arguments:
-h, –help show this help message and exit
-e EMAIL, –email EMAIL Email Address You Want to Test
-f FILE, –file FILE Load a File with Multiple Email Addresses
-d DOMAIN, –domain DOMAIN Filter Results by Domain Name
-n, –nodumps Only Check Breach Info and Skip Password Dumps
-l, –list Get List of all pwned Domains
-c CHECK, –check CHECK Check if your Domain is pwned

Examples

Check Single Email
python3 pwnedornot.py -e
OR
python3 pwnedornot.py –email

Check Multiple Emails from File
python3 pwnedornot.py -f
OR
python3 pwnedornot.py –file

Filter Result for a Domain Name [Ex : adobe.com]
python3 pwnedornot.py -e -d
OR
python3 pwnedornot.py -f –domain

Get only Breach Info, Skip Password Dumps
python3 pwnedornot.py -e -n
OR
python3 pwnedornot.py -f –nodumps

Get List of all Breached Domains
python3 pwnedornot.py -l
OR
python3 pwnedornot.py –list

Check if a Domain is Pwned
python3 pwnedornot.py -c
OR
python3 pwnedornot.py –chec

Demo

R K

Recent Posts

Nuclei-Templates-Labs : A Hands-On Security Testing Playground

Nuclei-Templates-Labs is a dynamic and comprehensive repository designed for security researchers, learners, and organizations to…

31 minutes ago

SSH-Stealer : The Stealthy Threat Of Advanced Credential Theft

SSH-Stealer and RunAs-Stealer are malicious tools designed to stealthily harvest SSH credentials, enabling attackers to…

31 minutes ago

ollvm-unflattener : A Tool For Reversing Control Flow Flattening In OLLVM

Control flow flattening is a common obfuscation technique used by OLLVM (Obfuscator-LLVM) to transform executable…

32 minutes ago

Cybersecurity – Tools And Their Function

Cybersecurity tools play a critical role in safeguarding digital assets, systems, and networks from malicious…

22 hours ago

MODeflattener – Miasm’s OLLVM Deflattener

MODeflattener is a specialized tool designed to reverse OLLVM's control flow flattening obfuscation through static…

22 hours ago

My Awesome List : Tools And Their Functions

"My Awesome List" is a curated collection of tools, libraries, and resources spanning various domains…

22 hours ago