mirror of
https://github.com/thewhiteh4t/pwnedOrNot.git
synced 2026-09-29 13:04:51 +02:00
63 lines
1.8 KiB
Markdown
63 lines
1.8 KiB
Markdown
# pwnedOrNot
|
|
## Introduction
|
|
pwnedOrNot is a python script which checks if the email account has been compromised in a data breach, if the email account is compromised it proceeds to find **passwords** for the compromised account.
|
|
|
|
It uses [**haveibeenpwned**](https://haveibeenpwned.com/API/v2) v2 api to test email accounts and searches for the **password** in **Pastebin Dumps**
|
|
|
|
This script has been tested on
|
|
* **Kali Linux 18.2**
|
|
* **Ubuntu 18.04**
|
|
* **Kali Nethunter**
|
|
* **Termux**
|
|
|
|
## Installation
|
|
**Ubuntu and Kali**
|
|
|
|
```bash
|
|
pip install cfscrape
|
|
apt-get install nodejs
|
|
```
|
|
|
|
**Termux**
|
|
```bash
|
|
pkg install python2
|
|
pkg install git
|
|
pip2 install requests
|
|
pip2 install cfscrape
|
|
```
|
|
|
|
Other common standard python modules pwnedornot uses:
|
|
* os
|
|
* re
|
|
* time
|
|
* json
|
|
* requests
|
|
|
|
## Usage
|
|
```bash
|
|
git clone https://github.com/thewhiteh4t/pwnedOrNot.git
|
|
cd pwnedOrNot/
|
|
python pwnedornot.py
|
|
```
|
|
## Features
|
|
[**haveibeenpwned**](https://haveibeenpwned.com/API/v2) offers a lot of information about the compromised email, some useful information is displayed by this script:
|
|
* Name of Breach
|
|
* Domain Name
|
|
* Date of Breach
|
|
* Fabrication status
|
|
* Verification Status
|
|
* Retirement status
|
|
* Spam Status
|
|
* Source of Dump
|
|
* ID of Dump
|
|
|
|
And with all this information **pwnedOrNot** can easily find passwords for compromised emails if the dump is accessible and it contains the password
|
|
## Screenshots
|
|
|
|
|
|
|
|
Also works on Kali Nethunter
|
|
|
|
|
|
|