Oblivion is a tool focused in real time monitoring of new data leaks, notifying if the credentials of the user has been leak out. It’s possible too verify if any credential of user has been leak out before. The Oblivion have two modes:
- Oblivion Client: graphical mode.
- Oblivion Server: mode with API functionalities.
NOTE: The Oblivion Client and the Oblivion Server are independents.
Oblivion Client
Oblivion Server
Oblivion Features
CVEs scan
Works with powerful APIs
Works too with Google Dorks
Checks your password in Word Lists
Checks the last pastes in Pastebin
Output to txt, docx, pdf, xlsx, json, html, xml, db
Output to encrypted files
Sends result files to multiples Buckets S3
Upload the result files to Google Drive
Cab send result files by SSH (work with EC2)
Notify by Telegram and e-mail
Includes option to hide passwords for demonstrations
Works with scheduled scans
Possible to execute loop scans
APIs
| Service | Functions | Status |
|---|---|---|
| HaveIBeenPwned | E-mails and passwords | paid |
| Scylla.sh | Cleartext passwords, hashs and salts, usernames, IPs, domain | free |
| IntelX.io | Cleartext passwords, hashs and salts, usernames, IPs, domain, Bitcoin Wallets, IBAN | paid |
| Circl.lu | Checks for new CVEs | free |
Usage and configuration
For configuration or usage of Oblivion please read the documentation. All the steps were careful explained with images and examples.
Thanks and credits
- Peter Kleissner and the Intelligence X team
- Alejandro Caceres (Scylla)
- khast3x
- Daniel Miessler
- Gustavo Melgaço
- Alberico de Castro
- Eliabe Kaique
!