Passwords

Hunting Breached Passwords

• https://github.com/hmaverickadams/breach-parse

• WeLeakInfo – https://weleakinfo.to/v2/

• LeakCheck – https://leakcheck.io/

• SnusBase – https://snusbase.com/

• Scylla.sh – https://scylla.sh/

• HaveIBeenPwned – https://haveibeenpwned.com/

• Dehashed – https://dehashed.com/

Gathering Breach Credentials with breach parse

Tool for parsing breached passwords.

Download breached password list from magnet located here (put into beachparse folder): magnet:?xt=urn:btih:7ffbcd8cee06aba2ce6561688cf68ce2addca0a3&dn=BreachCompilation&tr=udp%3A%2F%2Ftracker.openbittorrent.com%3A80&tr=udp%3A%2F%2Ftracker.leechers-paradise.org%3A6969&tr=udp%3A%2F%2Ftracker.coppersurfer.tk%3A6969&tr=udp%3A%2F%2Fglotorrents.pw%3A6969&tr=udp%3A%2F%2Ftracker.opentrackr.org%3A1337

Cd to breach-parse folder
Run      ./breach-arse.sh @domain domain.txt

Hunting Breached credentials with DeHashed

• DeHashed – costs money

• Can search for anything in the screenshot below.

• Hashes can be searched at hashes.org

Other tips

If you find a breached password, search for the password to find other compromised accounts.