pwndb

pwndb.py pwndb.py is a python command-line tool for searching leaked credentials using the Onion service with the same name. Usage usage: pwndb.py -h --target TARGET --list LIST --output OUTPUT --proxy PROXY optional arguments: -h, --help show this help message and exit --target TARGET Target...

Breach-Report-Collection

Breach Report Collection A collection of companies that disclose adversary TTPs after they have been breached Useful for analysis of intrusions launched by adversaries with measurable effects and impact Organization| Breach Date| Adversary| Source ---|---|---|--- DigiCert| April 2026| GoldenEyeDo...

PwnedPasswordsChecker

PwnedPasswordsChecker PwnedPasswordsChecker is a tool that checks if the hash of a known password in SHA1 or NTLM format is present in the list of I Have Been Pwned leaks and the number of occurrences. You can download the hash-coded version for SHA1 here or the hash-coded version for NTLM here...

steamer

Steamer Import, manage, search public dumps. Do you have massive amounts of CSV, .sql, .txt, that have credentials, passwords, and hashes inside? Use Steamer to manage them! Load them into a MongoDB database, and either use the console directly, or just use the handy web interface complete with...

RAT-via-Telegram

RAT-via-Telegram Dviros's notes: Windows Remote Post Breach Tool via Telegram Python 2.7, Originally created by Ritiek, Forked and modified by mvrozanti and then myself. The whole purpose of this tool is to demonstrate as a "PoC" the control of an already breached machine, via Telegram. As the sa...

pwnedOrNot

OSINT Tool for Finding Passwords of Compromised Email Accounts Created by Lohitya Pushkar thewhiteh4t. Twitter - Blog Available| in| ---|---|--- BlackArch Linux| SecBSD| Tsurugi Linux | | pwnedOrNot works in two phases. In the first phase it tests the given email address using HaveIBeenPwned v3...

Whoisleak

Whoisleak This tool queries the emails that registered the domain and verifies if they were leaked in some data leak. To install $ apt-get install nodejs-legacy $ pip install -r requirements.txt Usage Example python whoisleak.py -u securityattack.com.br Contact / Blog Eddy Oliveira SecurityAttack...

XposedOrNot

XposedOrNot XposedOrNot XoN tool is to search an aggregated repository of xposed passwords comprising of 850 million real time passwords. Usage of such compromised passwords is detrimental to individual account security. Screenshot What is Xposed Passwords? The main aim of this project is to give...

LeakSearch

LeakSearch LeakSearch is a simple tool to search and parse plain text passwords using ProxyNova COMB Combination Of Many Breaches over the Internet. You can define a custom proxy and you can also use your own password file, to search using different keywords: such as user, domain or password. In...

WhatBreach

WhatBreach WhatBreach is an OSINT tool that simplifies the task of discovering what breaches an email address has been discovered in. WhatBreach provides a simple and effective way to search either multiple, or a single email address and discover all known breaches that this email has been seen i...

h8mail

h8mail is an email OSINT and breach hunting tool using different breach and reconnaissance services, or local breaches such as Troy Hunt's "Collection1" and the infamous "Breach Compilation" torrent. 📖 Table of Content Table of Content Features APIs Usage Usage examples Thanks & Credits Related...

opensnitch

Join the project community on our server! OpenSnitch is a GNU/Linux application firewall. •• Key Features • Download • Installation • Usage examples • In the press •• Key features Interactive outbound connections filtering. Block ads, trackers or malware domains system wide. Ability to configure...

MailAccess

Let's connect mailaccess.pro · Docs · PyPI · Changelog Self-hostable OSINT platform for investigating email addresses. Fan out across breach databases, social networks, DNS records, and the open web, then get back a unified exposure score and structured findings you can export or pipe into Malteg...

CyberPup

CyberPup A free, open-source cybersecurity app for everyday people. CyberPup helps non-technical users lock down their digital lives through guided checklists, bite-sized lessons, and tools like breach checking. All guidance is grounded in well-known frameworks from ACSC, CISA, and NIST -...

OneRuleToRuleThemStill

OneRuleToRuleThemStill An revamped and optimised version of OneRuleToRuleThemAll. OneRuleToRuleThemStill now has a 5% 6.9% reduction in rules 52,000 down to 49,465 48,414 with 0% performance loss against the Lifeboat and LastFM data breaches. Updates: De-duplication of resulting candidate...

Zen

Find email addresses of Github users Find email address of a user python zen.py username or python zen.py https://github.com/username Find email addressess of contributors of a repository python zen.py https://github.com/username/repository Find email addresses of members of an organization pytho...

iKy

Description | Installation | Website | Modules | Issues | Supporting iKy Description Project iKy is a tool that collects information from an email and shows results in a nice visual interface. Visit the Gitlab Page of the Project Video Demo Modules Installation You must install Redis and start it...

CVE-2024-50961

Sensitive Data Exposure CVE-2024-50961 Description In DonWeb Ferozo Hosting v1.1, a remote attacker can exploit URL parameters to access sensitive data, including database credentials. Attack vectors include network sniffing, server logs, and browser history, potentially exposing organizations to...

rupture

Rupture Rupture is a framework for easily conducting BREACH and other compression-based attacks. Authors Rupture is developed by: Dimitris Karakostas [email protected] Dionysis Zindros [email protected] Eva Sarafianou [email protected] Dimitris Grigoriou [email protected] This...

MOVEit-Transfer-Data-Breach-Analysis.

MOVEit-Transfer-Data-Breach-Analysis. ​Detailed analysis of the 2023 MOVEit Transfer data breach CVE-2023-34362 for CS50 Cybersecurity. This project explores the technical impact of unauthenticated SQL Injection and its consequences for global data privacy, affecting 2,700+ organizations. Special...