# PwnedOrNot  | OSINT Tool for Finding Passwords of Compromised Email Addresses

**URL:** <https://onehack.st/t/pwnedornot-osint-tool-for-finding-passwords-of-compromised-email-addresses/88912>\
**Category:** Tools & Scripts\
**Tags:** tools, privacy, piracy, trading\
**Created:** [May 29, 2020, 1:12pm UTC](https://onehack.st/t/pwnedornot-osint-tool-for-finding-passwords-of-compromised-email-addresses/88912 "2020-05-29T13:12:15Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![TheStrength](https://onehack.st/user_avatar/onehack.st/thestrength/32/46753_2.png) [@TheStrength](https://onehack.st/u/TheStrength)\
**Post date:** [May 29, 2020, 1:12pm UTC](https://onehack.st/t/pwnedornot-osint-tool-for-finding-passwords-of-compromised-email-addresses/88912/1 "2020-05-29T13:12:16Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/5/8/580b64d548caf9d363348d98dfa41d1d78019a56.jpeg)

#### OSINT Tool for Finding Passwords of Compromised Email Accounts

[![](https://camo.githubusercontent.com/c862847bc50b07b08e9388cb99d6eb959151ab48/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f48617665494265656e50776e65642d76332d626c75652e7376673f7374796c653d706c6173746963)](https://camo.githubusercontent.com/c862847bc50b07b08e9388cb99d6eb959151ab48/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f48617665494265656e50776e65642d76332d626c75652e7376673f7374796c653d706c6173746963) [![](https://camo.githubusercontent.com/27c99d5e2808d2ffdf4266aa5ac13aed4e766e0c/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f507974686f6e2d332d627269676874677265656e2e7376673f7374796c653d706c6173746963)](https://camo.githubusercontent.com/27c99d5e2808d2ffdf4266aa5ac13aed4e766e0c/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f507974686f6e2d332d627269676874677265656e2e7376673f7374796c653d706c6173746963)

[**Twitter**](https://twitter.com/thewhiteh4t) - [**Telegram**](https://t.me/thewhiteh4t) - [**Blog**](https://thewhiteh4t.github.io/)

| Available | in | |
| --- | --- | --- |
| [BlackArch Linux](https://blackarch.org/) | [SecBSD](https://secbsd.org/) | [Tsurugi Linux](https://tsurugi-linux.org/) |
| [![](https://camo.githubusercontent.com/6c5d004085b3cbddc44235b272d9633981574614/68747470733a2f2f692e696d6775722e636f6d2f31774a564456352e706e67)](https://camo.githubusercontent.com/6c5d004085b3cbddc44235b272d9633981574614/68747470733a2f2f692e696d6775722e636f6d2f31774a564456352e706e67) | [![](https://camo.githubusercontent.com/d3c5c3d2c5780746e06aabc1ca2bd561efaca0ee/68747470733a2f2f692e696d6775722e636f6d2f7a3336784c38632e706e67)](https://camo.githubusercontent.com/d3c5c3d2c5780746e06aabc1ca2bd561efaca0ee/68747470733a2f2f692e696d6775722e636f6d2f7a3336784c38632e706e67) | [![Tsurugi Linux](https://camo.githubusercontent.com/651e3b5d7e799edc3beba9333bf6b5d7b045ae6a/68747470733a2f2f692e696d6775722e636f6d2f5331796c6370372e6a7067)](https://camo.githubusercontent.com/651e3b5d7e799edc3beba9333bf6b5d7b045ae6a/68747470733a2f2f692e696d6775722e636f6d2f5331796c6370372e6a7067) |

pwnedOrNot uses [**haveibeenpwned**](https://haveibeenpwned.com/API/v3) v3 api to test email accounts and tries to find the **password** in **Pastebin Dumps**.

## Featured

[OSINT Collection Tools for Pastebin - Jake Creps](https://jakecreps.com/2019/05/08/osint-collection-tools-for-pastebin/)

## [**Changelog**](https://github.com/thewhiteh4t/pwnedOrNot/wiki/Changelog)

## Features

[**haveibeenpwned**](https://haveibeenpwned.com/API/v3) offers a lot of information about the compromised email, some useful information is displayed by this script:

- Name of Breach
- Domain Name
- Date of Breach
- Fabrication status
- Verification Status
- Retirement status
- Spam Status

And with all this information **pwnedOrNot** can easily find passwords for compromised emails if the dump is accessible and it contains the password

#### Tested on

- **Kali Linux 2019.1**
- **BlackArch Linux**
- **Ubuntu 18.04**
- **Kali Nethunter**
- **Termux**

## Installation

**Ubuntu / Kali Linux / Nethunter / Termux**

git clone [https://github.com/thewhiteh4t/pwnedOrNot.git](https://github.com/thewhiteh4t/pwnedOrNot.git) cd pwnedOrNot pip3 install requests

**BlackArch Linux**

pacman -S pwnedornot

## Updates

cd pwnedOrNot git pull

## Usage

```auto
python3 pwnedornot.py -h

usage: pwnedornot.py [-h] [-e EMAIL] [-f FILE] [-d DOMAIN] [-n] [-l]
                     [-c CHECK]

optional arguments:
  -h, --help show this help message and exit
  -e EMAIL, --email EMAIL Email Address You Want to Test
  -f FILE, --file FILE Load a File with Multiple Email Addresses
  -d DOMAIN, --domain DOMAIN Filter Results by Domain Name
  -n, --nodumps Only Check Breach Info and Skip Password Dumps
  -l, --list Get List of all pwned Domains
  -c CHECK, --check CHECK Check if your Domain is pwned

# Examples

# Check Single Email
python3 pwnedornot.py -e <email>
#OR
python3 pwnedornot.py --email <email>

# Check Multiple Emails from File
python3 pwnedornot.py -f <file name>
#OR
python3 pwnedornot.py --file <file name>

# Filter Result for a Domain Name [Ex : adobe.com]
python3 pwnedornot.py -e <email> -d <domain name>
#OR
python3 pwnedornot.py -f <file name> --domain <domain name>

# Get only Breach Info, Skip Password Dumps
python3 pwnedornot.py -e <email> -n
#OR
python3 pwnedornot.py -f <file name> --nodumps

# Get List of all Breached Domains
python3 pwnedornot.py -l
#OR
python3 pwnedornot.py --list

# Check if a Domain is Pwned
python3 pwnedornot.py -c <domain name>
#OR
python3 pwnedornot.py --check <domain name>

```

## Demo

 ![image](https://onehack.st/uploads/default/original/3X/6/9/6994f2cf6404f05c81bc509970557fcdda7114c9.jpeg)

## GitHub:

> **[GitHub - thewhiteh4t/pwnedOrNot: OSINT Tool for Finding Passwords of Compromised...](https://github.com/thewhiteh4t/pwnedOrNot)**
>
> OSINT Tool for Finding Passwords of Compromised Email Addresses