davidtavarez / pwndb

Search for leaked credentials

pwndb.py

pwndb.py is a python command-line tool for searching leaked credentials using the Onion service with the same name.

Usage

usage: pwndb.py [-h] [--target TARGET] [--list LIST] [--output OUTPUT] [--proxy PROXY]

optional arguments:
  -h, --help       show this help message and exit
  --target TARGET  Target email/domain to search for leaks.
  --list LIST      A list of emails in a file to search for leaks.
  --output OUTPUT  Return results as json/txt
  --proxy PROXY    Set Tor proxy (default: 127.0.0.1:9150)

Note: tor service must be up and running to be connected to port 9050

Installation

Just create a virtualenv, install the requirements and make sure Tor is running.

$ git clone https://github.com/davidtavarez/pwndb
Cloning into 'pwndb'...
remote: Enumerating objects: 10, done.
remote: Counting objects: 100% (10/10), done.
remote: Compressing objects: 100% (9/9), done.
remote: Total 10 (delta 2), reused 4 (delta 0), pack-reused 0
Unpacking objects: 100% (10/10), done.

$ cd pwndb

$ virtualenv venv
New python executable in /Users/davidtavarez/pwndb/venv/bin/python
Installing setuptools, pip, wheel...done.

$ source venv/bin/activate

(venv) $ pip install -r requirements.txt
Collecting PySocks==1.6.8 (from -r requirements.txt (line 1))
...

(venv) $ python pwndb.py -h

usage: pwndb.py [-h] [--target TARGET] [--list LIST] [--output OUTPUT] [--proxy PROXY]

optional arguments:
  -h, --help       show this help message and exit
  --target TARGET  Target email/domain to search for leaks.
  --list LIST      A list of emails in a file to search for leaks.
  --output OUTPUT  Return results as json/txt
  --proxy PROXY    Set Tor proxy (default: 127.0.0.1:9150)

Contributing

Pull Requests are welcomed. For major changes, please open an issue first to discuss what you would like to change.

License

MIT License

Disclaimer

[!] Legal disclaimer: Usage of pwndb.py for attacking targets without
prior mutual consent is illegal. It is the end user's responsibility
to obey all applicable local, state and federal laws. Developers assume
no liability and are not responsible for any misuse or damage caused.

pwndb's Issues

Down?

http://pwndb2am4tzkvold.onion down for past 2 days or is it just me going through this problem?:)

Why are passwords all lowercase?

Is it a bug or a feature that the passwords are all lowercase?

V3 version

Anyone knows if the service with v3 version will be hosted?

tor issue

getting the following outputs for specified commands

/Desktop/pwndb$ tor
May 05 13:41:16.872 [notice] Tor 0.4.2.7 running on Linux with Libevent 2.1.11-stable, OpenSSL 1.1.1f, Zlib 1.2.11, Liblzma 5.2.4, and Libzstd 1.4.4.
May 05 13:41:16.872 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning
May 05 13:41:16.872 [notice] Read configuration file "/etc/tor/torrc".
May 05 13:41:16.875 [notice] Opening Socks listener on 127.0.0.1:9050
May 05 13:41:16.875 [warn] Could not bind to 127.0.0.1:9050: Address already in use. Is Tor already running?
May 05 13:41:16.876 [warn] Failed to parse/validate config: Failed to bind one of the listener ports.
May 05 13:41:16.876 [err] Reading config failed--see warnings above.

~/Desktop/pwndb$ python pwndb.py --target @google.com
[-] Searching for leaks...
[!] Can't connect to service! Make sure Tor socks proxy is listening on 127.0.0.1:9050

/Desktop/pwndb$ sudo netstat -plnt | fgrep 9050
tcp 0 0 127.0.0.1:9050 0.0.0.0:* LISTEN 6030/tor

Done with restarting and killall tor command still the error persists

Unable to determine SOCKS version from socks5h://127.0.0.1:9050

any solution for this problem ?

bash: virtualenv: command not found

hi there,

Could anyone please help me in this error ??

root@Shinobi:# cd Desktop/Tool
root@Shinobi:/Desktop/Tool# git clone https://github.com/davidtavarez/pwndb
Cloning into 'pwndb'...
remote: Enumerating objects: 4, done.
remote: Counting objects: 100% (4/4), done.
remote: Compressing objects: 100% (3/3), done.
remote: Total 142 (delta 0), reused 0 (delta 0), pack-reused 138
Receiving objects: 100% (142/142), 36.95 KiB | 147.00 KiB/s, done.
Resolving deltas: 100% (61/61), done.
root@Shinobi:/Desktop/Tool# cd pwndb
root@Shinobi:/Desktop/Tool/pwndb# virtualenv venv
bash: virtualenv: command not found

Appreciate your help.

Error detected

While running standard starter

--> python pwndb.py -h
  File "pwndb.py", line 71
    leak = leak.lower()
                      ^
TabError: inconsistent use of tabs and spaces in indentation

Otherwise according PEP 8 = line (|x| = code line ref) :

• | 9 | line too long (91 > 79 characters)
• | 12 | line too long (105 > 79 characters)
• | 43 | line too long (107 > 79 characters)
• | 56 | line too long (91 > 79 characters)
• | 58 | line too long (83 > 79 characters)
• | 82 | line too long (105 > 79 characters)
• | 99 | line too long (89 > 79 characters)

Should I have to work on it onto a PullRequest ?

Service Restart??

[!] Can't connect to service! restart tor service and try again.

Tried to connect to a v2 onion address

Hi there,

When running:
python pwndb.py --target domain.com
I get:
[-] Searching for leaks... [!] Can't connect to service! Make sure Tor socks proxy is listening on 127.0.0.1:9050

and in the Terminal window that Tor is running in it shows:
Jun 22 11:09:15.000 [warn] Tried to connect to a v2 onion address, but this version of Tor no longer supports them. Please encourage the site operator to upgrade. For more information see https://blog.torproject.org/v2-deprecation-timeline.

Is there a setting I must change or is this project not working anymore?

Can't connect to service!

Getting error

it is showing this error when I run virtualenv venv command in my terminal. Iam using tor also.
'virtualenv' is not recognized as an internal or external command,
operable program or batch file.

Is there pagination?

Does anyone know how to paginate the result, to continue reading after the 2000 result?

This is awesome, but how long is it supposed to take?

How long is a search supposed to take on average?

I'm doing a search and it's just kind of hanging.

Not sure if that's just because the database is huge or if there's an issue.

No result returned !

Hi @davidtavarez since yesterday the pwndb is retuning 0 results ! could you please check if there is somthing wrong in the server side ?

Thank you in advance :)

not working

i run tor service and tor browser but get this error

[-] Searching for leaks...
Traceback (most recent call last):
File "pwndb.py", line 139, in

print(bad + " " + e)

TypeError: cannot concatenate 'str' and 'InvalidSchema' objects

Can't connect to the service

I've made sure my tor is up and working, is it down or something?

Thanks !

Importing list from email cc's

This isn't an issue, but a feature request/idea/general comment.

If you are part of/found an email chain with a list of cc's, they come in the format of:
"name <[email protected]>, name1 <[email protected]>," etc...
An easy way to sort that is to copy and paste the raw cc list into a file and then run
cat [filename] | sed 's/\s\+/\n/g' | grep "@" | tr -d '<>,"'
This properly formats the list so it can passed through ./pwndb --list :D

it doesnt work ! please help me !!

when testing an email it says [email protected] !!!
now what is this ? please help me to overcome this issue so that I can check leaked email credentials !
please reply

pw

Error

I am on windows 10 and am getting an error that says "Error contacting pwndb" Why is this? Does it have something to do with the pwndb website being offline?

Domain search results capped at 2001

When I search for a domain that has many results (for example, google.com), the results are always capped out at 2001 results. I am assuming this is a database limitation. Any ideas for a good work around?

restart tor service

hi, when i do python pwndb.py --target and use my target i get an error saying:

[-] Searching for leaks...
[!] Can't connect to service! restart tor service and try again.

when i try to do service tor restart it says : Failed to restart tor.service: Unit tor.service not found.

any way to fix this?

{Improvement Question}

Hey, Just a quick Question - Will you ever add a Leaked Ip-Adresses section or maybe increase the overall amount of leaks in your Database in general?

[!] Missing dependencies for SOCKS support

what did means?

i haven't tested it but i think i found a substitute

don't get me wrong I haven't installed this and haven't used it use at own risk but seems to be the same type of gist

https://github.com/D4Vinci/Cr3dOv3r

Service is down

Hi,

Will the service be back up any time soon?

Thanks

stuck at Searhing for leaks..

$ python pwndb.py --target [email protected]
[-] Searching for leaks...

========================================
its stuck like this!
help please.

Both of the services are down

http://pwndb2am4tzkvold.onion/
http://pwndb2am4tzkvold.onion.pet/

Is pwndb down?

I have tried opening http://pwndb2am4tzkvold.onion/ vi TOR. But the site is not available. Please let us know when it will come up?
Thank you for your help. @davidtavarez

pwndb is down

http://pwndb2am4tzkvold.onion/ is down, any new url?

is pwndb2am4tzkvold.onion coming back

is anyone working on bringing pwndb back? looks like its constantly down last time i used it was in like 2019

Is pwndb currently down? See screenshot

Is pwndb down for anyone else? Just tried and this is the result:

Is the service down or is it just me?

[!] Can't connect to service! restart tor service and try again.

I have tried on a number of different machines with same result.

some problems

how can i search by like 'xxx' or search by password?

[!] Can't connect to service! restart tor service and try again.

i just followed the instruction for installation however i got this message when trying to search and target my own email just to see if it's working.

License

It would be great with FLOSS license.
What do you think about that ?

Troubleshooting since #22 merged

All request return :

Traceback (most recent call last):
  File "pwndb.py", line 136, in <module>
    main(emails, output)
  File "pwndb.py", line 27, in main
    print(info + " Searching for leaks...")
  File "/home/xavcc/pwndb/venv/lib/python3.6/codecs.py", line 377, in write
    self.stream.write(data)
TypeError: write() argument must be str, not bytes

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "pwndb.py", line 140, in <module>
    print(bad + " " + e)
TypeError: must be str, not TypeError

It seems to be related with MR #22. I've got error yesterday, update done today and then it breaks

pwndb2am4tzkvold.onion is down again...

I have tried to access pwndb2am4tzkvold.onion with TOR browser and it appears to be down

Error!

(venv) ┌──(ssd㉿kali)-[~/pwndb]
└─$ python3 pwndb.py --target [email protected]
[-] Searching for leaks...
[!] Can't connect to service! restart tor service and try again.

(venv) ┌──(sushant㉿kali)-[~/pwndb]

see i got this above error when i run this cmd : python3 pwndb.py --target [email protected]