
أداة سطر أوامر للاستعلام عن API الخاص بـ Have I Been Pwned للحصول على الحسابات المخترقة والملصقات وكشف كلمات المرور، مما يتيح تقييمًا أمنيًا سريعًا لبيانات الاعتماد المخترقة.
أداة سطر أوامر للاستعلام عن خدمة Troy Hunt's Have I been pwned? باستخدام وحدة Node.js hibp.
قم بتنزيل وتثبيت Node.js، ثم قم بتثبيت pwned بشكل عام باستخدام npm:
npm install pwned -g
بدلاً من ذلك، يمكنك تشغيلها عند الطلب باستخدام مشغل الحزم npx:
npx pwned
في 18 يوليو 2019، قامت واجهة برمجة تطبيقات haveibeenpwned.com بنقل العديد من الخدمات خلف المصادقة،
مما يتطلب مفتاح API. راجع منشور Troy's للسبب وشرح كامل.
لاستخدام بعض أوامر pwned (مثل ba، pa، وsearch)، ستحتاج
إلى الحصول على مفتاح API وتشغيل pwned apiKey لتكوين pwned. الأوامر الأخرى لا
تتطلب مفتاح API ويمكنك استخدامها دون الحصول على واحد.
pwned <command>
Commands:
pwned apiKey [key] set the API key to be used for authenticated requests
pwned ba <account|email> get all breaches for an account (username or email address)
pwned bd <domain> get all breached email addresses for a domain
pwned breach <name> get a single breached site by breach name
pwned breaches get all breaches in the system
pwned dc get all data classes in the system
pwned lb get the most recently added breach
pwned pa <email> get all pastes for an account (email address)
pwned pw <password> securely check a password for public exposure
pwned sd get all subscribed domains for your account
pwned search <account|email> search breaches and pastes for an account (username or email
address)
pwned slbe <email> get all stealer log domains for an email address
pwned slbed <email-domain> get all stealer log email aliases for an email domain
pwned slbwd <website-domain> get all stealer log email addresses for a website domain
pwned subStatus get the subscription status of your API key
Options:
-h, --help Show help [boolean]
-v, --version Show version number [boolean]
احصل على جميع الاختراقات لحساب:
$ pwned ba [email protected]
✔ Good news — no pwnage found!
احصل على جميع الاختراقات في النظام، مع تصفية النتائج إلى نطاق 'adobe.com' فقط:
$ pwned breaches -d adobe.com
-
Title: Adobe
Name: Adobe
Domain: adobe.com
BreachDate: 2013-10-04
AddedDate: 2013-12-04T00:00:00Z
ModifiedDate: 2013-12-04T00:00:00Z
PwnCount: 152445165
Description: In October 2013, 153 million Adobe accounts were breached with each containing an internal ID, username, email, <em>encrypted</em> password and a password hint in plain text. The password cryptography was poorly done and <a href="http://stricture-group.com/files/adobe-top100.txt" target="_blank" rel="noopener">many were quickly resolved back to plain text</a>. The unencrypted hints also <a href="http://www.troyhunt.com/2013/11/adobe-credentials-and-serious.html" target="_blank" rel="noopener">disclosed much about the passwords</a> adding further to the risk that hundreds of millions of Adobe customers already faced.
DataClasses:
- Email addresses
- Password hints
- Passwords
- Usernames
IsVerified: true
IsFabricated: false
IsSensitive: false
IsActive: true
IsRetired: false
IsSpamList: false
LogoType: svg
احصل على موقع واحد مخترق حسب اسم الاختراق:
$ pwned breach MyCompany
✔ No breach found by that name.
احصل على جميع فئات البيانات في النظام، مع إرجاع نتائج JSON الخام للاستخدام الخارجي/المتسلسل:
$ pwned dc --raw
["Account balances","Address book contacts","Age groups","Ages","Apps installed on devices","Astrological signs","Auth tokens","Avatars","Bank account numbers","Banking PINs","Beauty ratings","Biometric data","Browser user agent details","Buying preferences","Car ownership statuses","Career levels","Cellular network names","Charitable donations","Chat logs","Credit card CVV","Credit cards","Credit status information","Customer feedback","Customer interactions","Dates of birth","Deceased date","Deceased statuses","Device information","Device usage tracking data","Drinking habits","Drug habits","Eating habits","Education levels","Email addresses","Email messages","Employers","Ethnicities","Family members' names","Family plans","Family structure","Financial investments","Financial transactions","Fitness levels","Genders","Geographic locations","Government issued IDs","Health insurance information","Historical passwords","Home ownership statuses","Homepage URLs","IMEI numbers","IMSI numbers","Income levels","Instant messenger identities","IP addresses","Job titles","MAC addresses","Marital statuses","Names","Nationalities","Net worths","Nicknames","Occupations","Parenting plans","Partial credit card data","Passport numbers","Password hints","Passwords","Payment histories","Payment methods","Personal descriptions","Personal health data","Personal interests","Phone numbers","Physical addresses","Physical attributes","Political donations","Political views","Private messages","Professional skills","Profile photos","Purchases","Purchasing habits","Races","Recovery email addresses","Relationship statuses","Religions","Reward program balances","Salutations","School grades (class levels)","Security questions and answers","Sexual fetishes","Sexual orientations","Smoking habits","SMS messages","Social connections","Social media profiles","Spoken languages","Support tickets","Survey results","Time zones","Travel habits","User statuses","User website URLs","Usernames","Utility bills","Vehicle details","Website activity","Work habits","Years of birth","Years of professional experience"]
احصل على جميع اللصقات لعنوان بريد إلكتروني:
$ pwned pa [email protected]
-
Source: Pastebin
Id: YrpQA60S
Title: null
Date: 2018-01-24T07:54:15Z
EmailCount: 16476
-
Source: Pastebin
Id: suPshHZ1
Title: null
Date: 2017-09-06T03:41:33Z
EmailCount: 20444
-
Source: Pastebin
Id: xyb8vavK
Title: null
Date: 2015-06-01T00:16:46Z
EmailCount: 8
-
Source: Pastebin
Id: DaaFj8Be
Title: CrackingCore - Redder04
Date: 2015-04-05T22:22:39Z
EmailCount: 116
-
Source: Pastebin
Id: 9MAAgecd
Title: IPTV Yabancı Combolist
Date: 2015-02-07T15:21:00Z
EmailCount: 244
-
Source: Pastebin
Id: QMx1dPUT
Title: null
Date: 2015-02-02T20:45:00Z
EmailCount: 6607
-
Source: Pastebin
Id: zUFSee4n
Title: nethingoez
Date: 2015-01-21T15:13:00Z
EmailCount: 312
-
Source: AdHocUrl
Id: http://siph0n.in/exploits.php?id=4560
Title: BuzzMachines.com 40k+
Date: null
EmailCount: 36959
-
Source: AdHocUrl
Id: http://siph0n.in/exploits.php?id=4737
Title: PayPalSucks Database 102k
Date: null
EmailCount: 82071
-
Source: AdHocUrl
Id: http://balockae.online/files/BlackMarketReloaded_users.sql
Title: balockae.online
Date: null
EmailCount: 10547
بشكل آمن تحقق من كلمة مرور لمعرفة ما إذا تم كشفها في اختراق بيانات:
$ pwned pw Password1234
⚠ Oh no — pwned 3360 times!
ابحث عن الاختراقات واللصقات لحساب (مع اقتطاع بيانات الاختراق):
$ pwned search nobody
breaches:
-
Name: BattlefieldHeroes
-
Name: CannabisForum
-
Name: Forbes
-
Name: Gawker
-
Name: HackForums
-
Name: LoungeBoard
-
Name: PokemonCreed
-
Name: Win7Vista
pastes: null
هذه الأداة موزعة تحت رخصة MIT.