mirror of
https://github.com/thewhiteh4t/pwnedOrNot.git
synced 2026-08-31 20:29:40 +02:00
87 lines
2.3 KiB
Markdown
Executable File
87 lines
2.3 KiB
Markdown
Executable File
# pwnedOrNot
|
|
## Introduction
|
|
pwnedOrNot is a python script which checks if the email account has been compromised in a data breach, if the email account is compromised it proceeds to find **passwords** for the compromised account.
|
|
|
|
It uses [**haveibeenpwned**](https://haveibeenpwned.com/API/v2) v2 api to test email accounts and searches for the **password** in **Pastebin Dumps**
|
|
|
|
This script has been tested on
|
|
* **Kali Linux 18.2**
|
|
* **Ubuntu 18.04**
|
|
* **Kali Nethunter**
|
|
* **Termux**
|
|
|
|
**Works with both Python2 and Python3**
|
|
|
|
## Installation
|
|
**Ubuntu and Kali**
|
|
|
|
```bash
|
|
# Python 2
|
|
pip install cfscrape
|
|
apt-get install nodejs
|
|
|
|
# Python 3
|
|
apt-get install python3-pip
|
|
pip3 install requests
|
|
pip3 install cfscrape
|
|
```
|
|
|
|
**Termux**
|
|
```bash
|
|
# Python 2
|
|
pkg install python2
|
|
pkg install git
|
|
pip2 install requests
|
|
pip2 install cfscrape
|
|
|
|
# Python 3
|
|
pkg install python2
|
|
pip install requests
|
|
pip install cfscrape
|
|
```
|
|
|
|
Other common standard python modules pwnedornot uses:
|
|
* os
|
|
* re
|
|
* time
|
|
* json
|
|
* requests
|
|
* argparse
|
|
|
|
## Usage
|
|
```bash
|
|
git clone https://github.com/thewhiteh4t/pwnedOrNot.git
|
|
cd pwnedOrNot/
|
|
python pwnedornot.py
|
|
```
|
|
|
|
```bash
|
|
python pwnedornot.py -h
|
|
usage: pwnedornot.py [-h] [-e EMAIL] [-f FILE]
|
|
|
|
optional arguments:
|
|
-h, --help show this help message and exit
|
|
-e EMAIL, --email EMAIL Email account you want to test
|
|
-f FILE, --file FILE Load a file with multiple email accounts
|
|
```
|
|
|
|
## Features
|
|
[**haveibeenpwned**](https://haveibeenpwned.com/API/v2) offers a lot of information about the compromised email, some useful information is displayed by this script:
|
|
* Name of Breach
|
|
* Domain Name
|
|
* Date of Breach
|
|
* Fabrication status
|
|
* Verification Status
|
|
* Retirement status
|
|
* Spam Status
|
|
|
|
And with all this information **pwnedOrNot** can easily find passwords for compromised emails if the dump is accessible and it contains the password
|
|
## Screenshots
|
|
|
|
|
|
|
|
Also works on Kali Nethunter
|
|
|
|
|
|
|