WEBDIENSTE/theHarvester
1
0
Fork 0
mirror of https://github.com/laramies/theHarvester.git synced 2026-08-17 19:35:40 +02:00
Code Issues Packages Projects Releases Wiki Activity

feat: add HIBP verified-domain source (#2488)

Browse Source
This commit is contained in:
Matt
2026-08-06 14:47:33 -04:00
committed by GitHub
parent ffd03b13ba
commit a7f883e45c
16 changed files with 482 additions and 21 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/wiki/Configuration-and-API-Keys.md
+5
View File
@@ -28,6 +28,9 @@ apikeys:
github:
key: your-github-token
hibpverified:
key: your-hibp-api-key
tomba:
key: your-tomba-key
secret: your-tomba-secret
@@ -39,6 +42,8 @@ The [README source matrix](https://github.com/laramies/theHarvester/blob/dev/REA
Provider pricing, quotas, and terms change frequently. Check the provider's current documentation for these details.
`hibpverified` queries [HIBP's authenticated verified-domain endpoint](https://haveibeenpwned.com/API/v3#BreachedDomain) only when explicitly named, either alone or in a combination such as `breaches,hibpverified`. Capability selectors and `all` exclude it. Live use requires a user-owned paid HIBP API key and a user-owned domain verified in that account. REST queries selecting it also require the operator `X-API-Key`; the keyless `haveibeenpwned` source continues to query only the public breach catalogue.
## Proxies
Edit `~/.theHarvester/proxies.yaml` using `host:port` entries: