Module Name: Have I been pwned? Paste Search
Module path: recon/contacts-credentials/hibp_paste
Name: Have I been pwned? Paste Search
Path: modules/recon/contacts-credentials/hibp_paste.py
Author: Tim Tomes (@LaNMaSteR53)
Description:
Leverages the haveibeenpwned.com API to determine if email addresses have been published to various paste sites. Adds compromised email addresses to the 'credentials' table.
Options:
| Name |
Current Value |
Required |
Description |
| DOWNLOAD |
True |
yes |
download pastes |
| SOURCE |
default |
yes |
source of input (see 'show info' for details) |
Source Options:
| default |
SELECT DISTINCT email FROM contacts WHERE email IS NOT NULL |
| <string> |
string representing a single input |
| <path> |
path to a file containing a list of inputs |
| query <sql> |
database query returning one column of inputs |
Comments:
* Paste sites supported: Pastebin, Pastie, or Slexy