Password OSINT

Hunting Breached Password

• Gather all emails and password related to your target

• Check to see if there are patterns with the passwords.

• Check if you can tie the emails/usernames/passwords to another account such as their personal accounts.

• Search using the password/hashes you've gathered to get accounts related to that password.

Tools

• DeHashed: https://dehashed.com/

• Crackstation: https://crackstation.net/

• Hashes.com: https://hashes.com/en/decrypt/hash

• PasteBin: https://pastebin.com/

• SnusBase: https://www.snusbase.com/

• HaveIBeenPwned: https://haveibeenpwned.com/

• IntelligenceX: https://intelx.io/

• Leak-Lookup: https://leak-lookup.com/