# thewhiteh4t/pwnedOrNot

OSINT Tool for Finding Passwords of Compromised Email Addresses

Repository: https://github.com/thewhiteh4t/pwnedOrNot
Canonical: https://ross.abutalabs.com/products/pwnedornot
Language: Python
License: MIT
License Family: permissive
Topics: haveibeenpwned, api, pwnedornot, passwords, hacked-emails, osint
Last push: 2026-03-28T06:34:07+00:00

## Health v2 (maintenance only)
Score: 66/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 74, release rhythm 35, longevity 100
- inputs: {"age_days": 3022, "days_push": 158, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 2628, forks 346 (observed 2026-08-28T04:07:05.450225+00:00)

## What it is
pwnedOrNot is a Python command-line OSINT tool that checks email addresses against the HaveIBeenPwned v3 API for past breaches and then searches public dumps for exposed passwords. It reports breach details such as breach name, domain, date, and verification status.

## Use cases
- check if an email address has been compromised in a data breach
- find passwords for breached email accounts in public dumps
- bulk-check a list of emails for breaches
- investigate breach details like date and verification status during OSINT recon
- filter breach lookups by domain

## When to choose
- you need a quick CLI-based breach and password lookup for email addresses
- you are doing OSINT or security assessments on Kali, BlackArch, or Termux
- you already have a HaveIBeenPwned API key

## When to avoid
- you don't have a paid HaveIBeenPwned v3 API key
- you need a GUI or web-based breach checker
- you expect guaranteed password recovery, since dumps may be missing or inaccessible
- you run Windows natively without WSL2 or a VM

## Facets
- artifact type: cli-tool
- maturity: active
- function: osint, security, search-engine, cli
- domain: security, osint, penetration-testing, privacy
- platform: cli, python
- tags: haveibeenpwned, password-dumps, breach-checker, email-lookup, cybersecurity, linux, docker

## Member repositories
- thewhiteh4t/pwnedOrNot (main) score 66

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:07:05.450225+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T02:19:43.025243+00:00, confidence not recorded.
  - readme: https://github.com/thewhiteh4t/pwnedOrNot (fetched 2026-08-28T04:07:05.450225+00:00, sha 803857dcec0d)
- Data as of 2026-08-30T08:39:29.467469+00:00.