mirror of
https://github.com/thewhiteh4t/pwnedOrNot.git
synced 2026-09-09 19:27:46 +02:00
42 lines
1.4 KiB
Markdown
42 lines
1.4 KiB
Markdown
# pwnedOrNot
|
|
## Introduction
|
|
pwnedOrNot is a python script which checks if the email account has been compromised in a data breach, if the email account is compromised it proceeds to find **passwords** for the compromised account.
|
|
|
|
It uses [**haveibeenpwned**](https://haveibeenpwned.com/API/v2) v2 api to test email accounts and searches for the **password** in **Pastebin Dumps**
|
|
|
|
This script has been tested on **Kali Linux 18.2** and **Ubuntu 18.04**.
|
|
|
|
## Installation
|
|
```bash
|
|
pip install cfscrape
|
|
apt-get install nodejs
|
|
```
|
|
It's a pure python script and relies on common python modules:
|
|
* os
|
|
* re
|
|
* time
|
|
* json
|
|
* requests
|
|
## Usage
|
|
```bash
|
|
git clone https://github.com/thewhiteh4t/pwnedOrNot.git
|
|
cd pwnedOrNot/
|
|
python pwnedornot.py
|
|
```
|
|
## Features
|
|
[**haveibeenpwned**](https://haveibeenpwned.com/API/v2) offers a lot of information about the compromised email, some useful information is displayed by this script:
|
|
* Name of Breach
|
|
* Domain Name
|
|
* Date of Breach
|
|
* Fabrication status
|
|
* Verification Status
|
|
* Retirement status
|
|
* Spam Status
|
|
* Source of Dump
|
|
* ID of Dump
|
|
|
|
And with all this information **pwnedOrNot** can easily find passwords for compromised emails if the dump is accessible and it contains the password
|
|
## Screenshots
|
|
|
|
|