pwned

pwned Troy Hunt氏のHave I been pwned?haveibeenpwnedサービスを照会するためのコマンドラインツールで、hibphibp Node.jsモジュールを使用しています。 !npm Versionnpm-imagenpm-url !Build Statusci-imageci-url インストール Node.jsnodejsをダウンロードしてインストールし、npmを使用してpwnedをグローバルにインストールしてください: npm install pwned -g または、npxnpxパッケージランナーを使用してオンデマンドで実行することもできます:...

lil-pwny

Lil Pwny Python を使用した Active Directory パスワードの高速オフライン監査。 Lil Pwny について Lil Pwny は、Active Directory から取得したユーザーパスワードの NTLM ハッシュを、Have I Been Pwned から既知の侵害済みパスワードとオフラインで照合する Python アプリケーションです。結果は JSON 形式で出力され、ユーザー名、一致したハッシュ（難読化可能）、HIBP でそのパスワードが確認された回数が含まれます。 Lil Pwny の詳細は私のブログをご覧ください。 機能 カスタムパスワード監査...

data-breach

Latest Data Breaches Repository This repository provides a comprehensive and continuously maintained list of confirmed data breaches from around the world. Each breach entry includes the breach name, which typically reflects the affected organization, along with the date of the incident. These tw...

HashCheck

PasswordHashCheck このプロジェクトは、k-anonymity方式を使用して高いレベルのプライバシーを維持しながら、漏洩したパスワードの検索を支援することを目的としています。 これを実現するために、さまざまなサービスのAPIが使用され、確認したいパスワードのハッシュの一部（例：最初の5文字）のみが送信されます。 前提条件 このプロジェクトは動作するためにいくつかのライブラリが必要です。インストールするには次のコマンドを使用してください： pip install -r requirements Python 3が必要であることに注意してください。 使用方法 passme.p...

PwnedCheck

PwnedCheck PwnedCheck 是一个命令行工具，用于通过Have I Been Pwned API 检查密码是否出现在已知的数据泄露事件中，并支持加密的 Bitwarden 密码库导出文件。 功能特性 从命令行检查单个密码 从文件处理密码 使用 -hashed 接受预计算的 SHA-1 哈希输入 使用 -bw 检查 Bitwarden 加密导出文件 使用 -hide 在输出中隐藏明文密码 使用 -v 显示请求级别的 HIBP 诊断信息 使用 -stats 打印运行结束时的统计信息 安装 预编译版本 你可以直接从发布页面下载针对你操作系统预编译的静态二进制文件： 1. 访问...

darknet-mcp-server

English | 简体中文 | 繁體中文 | 한국어 | Deutsch | Español | Français | Italiano | Dansk | 日本語 | Polski | Русский | Bosanski | العربية | Norsk | Português Brasil | ไทย | Türkçe | Українська | বাংলা | Ελληνικά | Tiếng Việt | हिन्दी 为 AI 代理提供暗网与威胁情报。 HIBP、ThreatFox、勒索软件追踪、Tor .onion 访问、区块链情报、漏洞利用搜索、窃密日志、恶意软件分...

PwnedPasswordsChecker

PwnedPasswordsChecker PwnedPasswordsChecker は、既知のパスワードのハッシュ（SHA1またはNTLM形式）がI Have Been Pwnedのリークリストに含まれているかどうか、およびその発生回数をチェックするツールです。 SHA1用のハッシュコード版はこちらから、NTLM用のハッシュコード版はこちらからダウンロードできます。 リストをダウンロードしたら、私の別のツールHIBP PasswordList Slimmerを使用してバイナリ形式に変換する必要があります。...

Fedora 41 : gopass-hibp (2025-b3bd444d1f)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-b3bd444d1f advisory. Update to 1.16.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Fedora 41 : gopass-hibp (2024-40c0ff79e8)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-40c0ff79e8 advisory. Automatic update for gopass-hibp-1.15.13-1.fc41. Changelog Tue Jul 9 2024 Mikel Olasagasti Uranga - 1.15.13-1 - Update to 1.15.13 - Closes rhbz2159125...

Qakbot botnet infrastructure suffers major takedown

The Qakbot botnet has suffered a major setback after its infrastructure was heavily disrupted by US and European law enforcement agencies. Operation DuckHunt, as it was codenamed, is possibly the largest US-led financial and technical disruption of a botnet infrastructure. Not only did the agenci...

2.6 million DuoLingo users have scraped data released

An unknown party has released the scraped data of 2.6 million DuoLingo users on a hacking forum. While they offered the data set for sale in January for $1,500, it's now been released on a new version of the Breached hacking forum for 8 site credits, worth only $2.13. DuoLingo is an educational...

Fedora: Security Advisory for gopass-hibp (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Half-Billion Compromised Credentials Lurking on Open Cloud Server

According to the National Crime Agency’s National Cyber Crime Unit in the U.K., nearly 586 million sets of credentials had been collected in a compromised cloud storage facility, free for the taking by any cybercrime yahoo who happened to stop by. The credentials were a mixed bag in terms of...

HashCheck - Tool To Assist In The Search For Leaked Passwords

This project aims to assist in the search for leaked passwords while maintaining a high level of privacy using the k-anonymity method. To achieve this, the APIs of different services are used, sending only a part of the Hash of the password we want to check, for example, the first 5 characters...

Nextcloud: Password policy changes not enforced for existing passwords

So this is two reports in one. Sort of. But they are the same issue, or at least related. 1. When you setup your nextcloud there is no password policy at all. There is the strength indicator. I get the password policy app is not yet active at that point. But a minimum length would not be that...

PwnedPasswordsChecker - Search (Offline) If Your Password (NTLM Or SHA1 Format) Has Been Leaked (HIBP Passwords List V5)

PwnedPasswordsChecker is a tool that checks if the hash of a known password in SHA1 or NTLM format is present in the list of I Have Been Pwned leaks and the number of occurrences. You can download the hash-coded version for SHA1 here or the hash-coded version for NTLM here Once the list is...

Google Adds Password Checkup Feature to Chrome Browser

Google will soon alert Chrome browser users of weak or compromised passwords. The checks will be in real time as Chrome users visit a password protected website. Bad passwords will trigger a red dialogue box alerting users to take action to better protect their account. The move integrates a...

WhatBreach - OSINT Tool To Find Breached Emails And Databases

WhatBreach is a tool to search for breached emails and their corresponding database. It takes either a single email or a list of emails and searches them leveraging haveibeenpwned.com's API, from there if there are any breaches it will search for the query link on Dehashed pertaining to the...

Troy Hunt Looks to Sell Have I Been Pwned

Citing overwhelming demands on his time, Troy Hunt is looking for a buyer for his site, Have I Been Pwned HIBP. HIBP offers a free service for consumers wanting to know if their user names and passwords have been compromised in a data breach; it also offers commercial services that include alerts...

Web Reconnaissance Framework: Recon-ng

Recon-ng is a full-featured Web Reconnaissance framework written in Python. Complete with independent modules, database interaction, built in convenience functions, interactive help, and command completion, Recon-ng provides a powerful environment in which open source web-based reconnaissance can...