pwndb is a tool that looks for leaked passwords from a dark web breach database given a user or domain.
Tool has been extended from the one made by PostRequest here.
Any number of users and domains can be specified.
pwndb -user foo -user bar
pwndb -domain foo.com -domain bar.com -domain baz.com
If at least one user and domain is specfied, all permutations will be checked but it will return only results that contain both.
The below command will check foo@baz.com and bar@baz.com
pwndb -user foo -user bar -domain baz.com
-
Download and install the go tools. https://golang.org/dl/
-
Find the location of your GOPATH.
go env GOPATH
-
Drop pwndb.go in GOPATH/src/pwndb (create any folders that don't exist)
-
Run the go install command and the binary should be able to run from anywhere.
go install pwndb pwndb
Download and run the binary for your platform below. (or from releases)
Windows
Linux
OSX