Data breach & OSINT search engines.

6ix · 12-20-2020, 11:00 PM

Here's a list I made of various data breach & OSINT search engines that I know of, thought i'd share.
If you don't know what these are, they're basically search engines for breached data (Database leaks/hacks,pastebin dumps,...)
These services allow you to search trough thousands of hacked databases for specific emails/usernames, and depending on the site, more details attached to their account (cleartext/hashed pw's,adress,phone,..)
They all have a varying amount of records and most of the time you can check if they provide a certain databse.

Let me know if you know any more that should be added!

https://breachchecker.com/ -- Free, just checks if your email appears in any database leak.
https://haveibeenpwned.com/ -- Free, just checks if your email appears in any database leak.
https://scatteredsecrets.com/ -- FREE, limited db's
https://scylla.sh/ -- FREE, currently in beta
https://leakcheck.net/ -- $9.99/Month + Free API
https://snusbase.com/ -- $16.99/Month - Paid API (80/Month)
https://leakpeek.com -- $9.99/Month - Paid API (40/Month)
https://leak-lookup.com/ -- $10 for 20 searches, L
https://weleakinfo.to/v2/ -- $25/Month + Free API
https://rslookup.com/ -- ONLY FOR RUNESCAPE DATA if for some reason you need this
https://ghostproject.fr -- 10$/24h access

mothered · 12-21-2020, 02:50 AM

This Is one magnificent contribution.

Very much appreciated.

prevent · 12-21-2020, 05:24 AM

https://scylla.sh/ -- FREE, currently in beta

I have made discord bot for this website, *<type>:query
type = email, name, ip, password

sends you a .txt of the logs it found, can also be added to dehashed api.
will share when I can get around to it.

Code:
import os
import discord
import requests
from bs4 import BeautifulSoup
import asyncio

client = discord.Client()

#If using pycharm change line 
# Change this:
# await message.channel.send(file=discord.File(rf'C:\Users\Woody\Desktop\b\{query}.txt'))
# to where the directory of this script is running.

@client.event
async def on_ready():
    await client.change_presence( activity=discord.Activity( type=discord.ActivityType.listening, name=".search <type>:<query>" ) )
    print( "\033[35mBot Now Running" )
    print( r"""
Detective Mike bot // Leaked Database Lookup (Free API) By Prevent [Powered by Scyllla.sh]
                                      ._ o o
                                      \_`-)|_
                                    ,""      \
                                  ,"  ## |  X X.
                                ," ##  ,-\__    `.
                              ,"      /    `--._;)
                            ,"    ## /  .==============.
                          ,"  ##    / <-|W~~DY-W~S-H~R~|->
                        ==============  '=============='
""" )

async def search(arg: str, message):
        try:
            query = arg.split( ".search ")[1].split( " " )[0]
            print( "Query: %s" % (query) )


            r = requests.get("https://scylla.sh/search?q=" + query + "&size=100&start=200", headers={'Accept': 'application/json'}, verify=False)
            ipinfo = BeautifulSoup( r.content, "html.parser" )
            strIpinfo = str( ipinfo ).replace( "}},", "\n" )

            text_file = open( f"{query}.txt", "w" )
            text_file.write('Enjoy this piece of fucking shit db search by Prevent x0x0x0 \n')
            text_file.write( f'{strIpinfo}' )
            text_file.close()

            embed = discord.Embed(
                title=f'__***QUERY:***__: ***{query}***',
                colour=discord.Colour.purple()
            )
            embed.set_image( url='https://cdn.discordapp.com/attachments/543434045741072385/556098401880637440/nicelane.gif' )
            embed.add_field( name='__***SHIT FOUND!***__', value="created by Prevent", inline=True )
            await message.channel.send(embed=embed)
        
            await message.channel.send(file=discord.File(rf'C:\Users\Woody\Desktop\b\{query}.txt'))
            os.remove( f"{query}.txt" )
        except(IndexError) as err:
            embed = discord.Embed(
                title='Detective Mike at your service!',
                description='*** .search email:querygoeshere***',
                colour=discord.Colour.purple()

            )
            embed.add_field( name='__***1***__', value="User", inline=True )
            embed.add_field( name='__***2***__', value="Email", inline=True )
            embed.add_field( name='__***3***__', value="IP", inline=True )
            await message.channel.send(embed=embed)
            return


@client.event
async def on_message(message):
    if (".search" in message.content):
        await search(message.content, message)


client.run("Put.Token.Here")

6ix · 12-22-2020, 10:00 PM

(12-21-2020, 05:24 AM)prevent Wrote: https://scylla.sh/ -- FREE, currently in beta

I have made discord bot for this website, *<type>:query
type = email, name, ip, password

sends you a .txt of the logs it found, can also be added to dehashed api.
will share when I can get around to it.

Code:
import os import discord import requests from bs4 import BeautifulSoup import asyncio client = discord.Client() #If using pycharm change line # Change this: # await message.channel.send(file=discord.File(rf'C:\Users\Woody\Desktop\b\{query}.txt')) # to where the directory of this script is running. @client.event async def on_ready(): await client.change_presence( activity=discord.Activity( type=discord.ActivityType.listening, name=".search <type>:<query>" ) ) print( "\033[35mBot Now Running" ) print( r""" Detective Mike bot // Leaked Database Lookup (Free API) By Prevent [Powered by Scyllla.sh] ._ o o \_`-)|_ ,"" \ ," ## | X X. ," ## ,-\__ `. ," / `--._;) ," ## / .==============. ," ## / <-|W~~DY-W~S-H~R~|-> ============== '==============' """ ) async def search(arg: str, message): try: query = arg.split( ".search ")[1].split( " " )[0] print( "Query: %s" % (query) ) r = requests.get("https://scylla.sh/search?q=" + query + "&size=100&start=200", headers={'Accept': 'application/json'}, verify=False) ipinfo = BeautifulSoup( r.content, "html.parser" ) strIpinfo = str( ipinfo ).replace( "}},", "\n" ) text_file = open( f"{query}.txt", "w" ) text_file.write('Enjoy this piece of fucking shit db search by Prevent x0x0x0 \n') text_file.write( f'{strIpinfo}' ) text_file.close() embed = discord.Embed( title=f'__***QUERY:***__: ***{query}***', colour=discord.Colour.purple() ) embed.set_image( url='https://cdn.discordapp.com/attachments/543434045741072385/556098401880637440/nicelane.gif' ) embed.add_field( name='__***SHIT FOUND!***__', value="created by Prevent", inline=True ) await message.channel.send(embed=embed) await message.channel.send(file=discord.File(rf'C:\Users\Woody\Desktop\b\{query}.txt')) os.remove( f"{query}.txt" ) except(IndexError) as err: embed = discord.Embed( title='Detective Mike at your service!', description='*** .search email:querygoeshere***', colour=discord.Colour.purple() ) embed.add_field( name='__***1***__', value="User", inline=True ) embed.add_field( name='__***2***__', value="Email", inline=True ) embed.add_field( name='__***3***__', value="IP", inline=True ) await message.channel.send(embed=embed) return @client.event async def on_message(message): if (".search" in message.content): await search(message.content, message) client.run("Put.Token.Here")

Actually pretty useful, ty 4 contribution.
Seems like their site is fully down atm tho?
Getting a server unreachable

mothered · 12-23-2020, 03:02 AM

(12-22-2020, 10:00 PM)6ix Wrote: Seems like their site is fully down atm tho?
Getting a server unreachable

It's definitely still down at the time of this post.

I shall check back later this evening.

prevent · 12-23-2020, 04:05 AM

Site has seemed that it moved Sad

RIP this was the only one that had a free api for users....

@mothered @6ix

(https://44.235.17.188)

is where its hosted, its still running and according to the owner on twitter....
https://twitter.com/_hyp3ri0n/status/134...9396274178

Xeleon · 12-31-2020, 01:00 PM

Thank you! This was helpful!

Happy new year Smile

d4ggm4sk · 01-01-2021, 09:17 PM

Thats some good $(tuff)*** right there. Do they have anything on leaked usernames and $(***)t for steam?