# D4Vinci/Cr3dOv3r

Know the dangers of credential reuse attacks.

Repository: https://github.com/D4Vinci/Cr3dOv3r
Canonical: https://ross.abutalabs.com/products/cr3dov3r
Language: Python
License: MIT
License Family: permissive
Topics: hacking, hacking-tool, pentesting, credentials, stealth, leaks, haveibeenpwned, hacked-emails, credential-reuse-attacks, leak, haveibeenpwnd
Last push: 2025-12-09T10:53:35+00:00

## Health v2 (maintenance only)
Score: 57/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 56, release rhythm 35, longevity 100
- inputs: {"age_days": 3215, "days_push": 267, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 2137, forks 409 (observed 2026-08-28T04:06:18.068922+00:00)

## What it is
Cr3dOv3r is a Python command-line pentesting tool for investigating credential reuse attacks. Given an email, it searches public breach databases (haveibeenpwned, GhostProject) for leaks and plain-text passwords, then tests those credentials against well-known websites to detect reuse.

## Use cases
- check if an email appears in public data breaches
- find plain-text passwords for a leaked email
- test whether a leaked password is reused on other websites
- verify if an old password is still active on known services
- audit credential reuse during a penetration test

## When to choose
- you need a quick CLI to check breach exposure and credential reuse for an email
- you are doing authorized pentesting or security research on credential reuse
- you want a simple Python tool that runs on Linux, Windows, or Docker

## When to avoid
- you need a compliant enterprise breach-monitoring service rather than a hacking tool
- you lack authorization to test credentials against target accounts
- you need a maintained tool with active development and modern APIs

## Facets
- artifact type: cli-tool
- maturity: maintenance
- function: security, osint, web-scraping, cli
- domain: security, penetration-testing, osint, privacy
- platform: windows, python, cli
- tags: credential-reuse, data-breaches, haveibeenpwned, pentesting, password-testing, leak-search, linux, macos, docker

## Member repositories
- D4Vinci/Cr3dOv3r (main) score 57

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:06:18.068922+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T02:51:49.682190+00:00, confidence not recorded.
  - readme: https://github.com/D4Vinci/Cr3dOv3r (fetched 2026-08-28T04:06:18.068922+00:00, sha 6b7aaaa03b47)
- Data as of 2026-08-30T08:39:29.467469+00:00.