JoelGMSec / LeakSearch

Search & Parse Password Leaks

Home Page:https://darkbyte.net

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Search issues

whoot opened this issue · comments

Hey, thanks for providing this tool and service.
However, I have the following issues.

Number parameter not working as intended

Despite having set the N parameter, the tool just prints the first 20 records (note that 1914 records were found)
grafik

EDIT: Looking into the code it seems that the number parameter is only used for truncating the output and that the API has a hardcoded limit of 20 records. This means that whenever there are more than 20 records, you only will be able to fetch the first 20 records. Anything beyond is not accessible at all - except there is something like an undocumented offset parameter?

False-positive records

It seems that it is not possible to search for specific domains or full entries.
Example: searching for "test@test.com" results in 10.000 entries which do also contain other stuff.

grafik

Also I noticed, that anything which contains a minus will result in false-positive records.
Example: Trying to get a list for the domain "@fake-box.com" gives me 10.000 records, which contain "fake-box.com" or either "fake" or "box".
grafik

Hello!

Answering your questions:

The -n parameter works perfectly, it's just that ProxyNova (which is a third party, over which I have no control) has a limitation and only shows the first 20 results in all cases.

I have tried several times to find out if there is some undocumented parameter to get the next 20 (or more than 20) without success.

As for false positives and mixed results, more of the same. I do not own that service and cannot control or modify its contents. I have only created a client to perform these searches in the most comfortable way possible :)

I hope I have solved your doubts, thanks for using my tools.

Regards!

Ohh, I see! I thought you were also the one running ProxyNova, lol.
In this case I completely understand that there is nothing you can do.