pwnedOrNot

Find Passwords for Compromised Email Accounts

pwnedOrNot uses haveibeenpwned v2 api to test email accounts and tries to find the password in Pastebin Dumps.

Features

haveibeenpwned offers a lot of information about the compromised email, some useful information is displayed by this script:

• Name of Breach
• Domain Name
• Date of Breach
• Fabrication status
• Verification Status
• Retirement status
• Spam Status

And with all this information pwnedOrNot can easily find passwords for compromised emails if the dump is accessible and it contains the password

Tested on

• Kali Linux 18.2
• Ubuntu 18.04
• Kali Nethunter
• Termux

Installation

Ubuntu and Kali

# Python 2
pip install cfscrape
apt-get install nodejs

# Python 3
apt-get install python3-pip
pip3 install requests
pip3 install cfscrape

Termux

# Python 2
pkg install python2
pkg install git
pip2 install requests
pip2 install cfscrape

# Python 3
pkg install python
pip install requests
pip install cfscrape

Usage

git clone https://github.com/thewhiteh4t/pwnedOrNot.git
cd pwnedOrNot/
python pwnedornot.py

python pwnedornot.py -h
usage: pwnedornot.py [-h] [-e EMAIL] [-f FILE]

optional arguments:
  -h, --help              show this help message and exit
  -e EMAIL, --email EMAIL Email account you want to test
  -f FILE, --file FILE    Load a file with multiple email accounts