- Hacking Truth by Kumar Atul Jaiswal

Find Leaked Email and Password via onion service

Leaked Email and Password

Billions of email addresses and plain text passwords have been leaked online by an unknown party, leaving countless Internet users at risk from credential stuffing and other attacks. Search for leaked email and password using the onion service

Security researcher Bob Diachenko discovered the unsafe elastics search database on 4 December, although it was first indexed by the BinaryAidz search engine and therefore has been publicly available since the beginning of the month.

Access to the database was disabled on 9 December when it reported to the US-based ISP hosting the IP address, giving potential hackers more than enough time to scrape the logged-in data.

In total, the database contained 2.7 billion email addresses and plain text passwords for more than a billion of them - providing a true starting point for a credential stuffing campaign.

How To Find Leaked Email and Passwords

We will use pwndb tool to find the password email leaked here...pwndb.py is a python command-line tool for searching leaked credentials using the Onion service with the same name. Search for leaked email and password using the onion service

Installation

git clone https://github.com/davidtavarez/pwndb




cd

ls





pip3 install -r requirements.txt  OR  pip install -r requirements.txt





Then, type "  virtualenv venv   " without quotes and hit enter...





source venv/bin/activate








Full Post :-  Click Here

Disclaimer

This was written for educational purpose and pentest only.
The author will not be responsible for any damage ..!
The author of this tool is not responsible for any misuse of the information.
You will not misuse the information to gain unauthorized access.
This information shall only be used to expand knowledge and not for causing  malicious or damaging attacks. Performing any hacks without written permission is illegal ..!


All video’s and tutorials are for informational and educational purposes only. We believe that ethical hacking, information security and cyber security should be familiar subjects to anyone using digital information and computers. We believe that it is impossible to defend yourself from hackers without knowing how hacking is done. The tutorials and videos provided on www.hackingtruth.in is only for those who are interested to learn about Ethical Hacking, Security, Penetration Testing and malware analysis. Hacking tutorials is against misuse of the information and we strongly suggest against it. Please regard the word hacking as ethical hacking or penetration testing every time this word is used.


All tutorials and videos have been made using our own routers, servers, websites and other resources, they do not contain any illegal activity. We do not promote, encourage, support or excite any illegal activity or hacking without written permission in general. We want to raise security awareness and inform our readers on how to prevent themselves from being a victim of hackers. If you plan to use the information for illegal purposes, please leave this website now. We cannot be held responsible for any misuse of the given information.

Video Tutorial :- 

          

scammer cctv - PHOTO : bbc

British hacker reveals Microsoft's fake call center in India, CCTV exploits

Jim Browning studied for a full three months by hacking the CCTV camera of a fake call center running in Microsoft's name in Gurugram and then handing the footage to the BBC. A BBC report reported that a thug at the call center in Gurugram, adjacent to Delhi, spoke to people by the name of Chris Lawson and told that he was speaking from San Jose, California.







According to the CCTV footage obtained by the BBC, the scammer of the Grugram is talking to a UK man by the name of Chris Lawson. In the meantime, the scammer asks the UK man (victim) to recover his computer for £ 1,295, or about Rs 1,21,250. The victim tells the scammer that he is in depression and may have a heart attack. After this the scammer says why are you crying, you are a good man.


Hacker says he wanted to show the world how scammers defraud people. The hacker has claimed that these scammers were working as Microsoft's technical support staff while sitting in an office in Grurugram. They used to send fake pop-up messages on the users' system as a warning.


The BBC report states that scammers pay lime to the UK of around Rs 21 million, or Rs 1,53,85,96,500, every month. Scammers pretend to be from banks, computer companies, retailers, and even the government.

Microsoft revealed that about 4.4 crore of its users are using hacked passwords and user names for login.





Microsoft Corporation is an American multinational technology company with headquarters in Redmond, Washington. It develops, manufactures, licenses, supports, and sells computer software, consumer electronics, personal computers, and related services. Its best known software products are the Microsoft Windows line of operating systems, the Microsoft Office suite, and the Internet Explorer and Edge web browsers. Its flagship hardware products are the Xbox video game consoles and the Microsoft Surface lineup of touchscreen personal computers. In 2016, it was the world's largest software maker by revenue (currently Alphabet/Google has more revenue). The word "Microsoft" is a portmanteau of "microcomputer" and "software". Microsoft is ranked No. 30 in the 2018 Fortune 500 rankings of the largest United States corporations by total revenue.


Microsoft was founded by Bill Gates and Paul Allen on April 4, 1975, to develop and sell BASIC interpreters for the Altair 8800. It rose to dominate the personal computer operating system market with MS-DOS in the mid-1980s, followed by Microsoft Windows. The company's 1986 initial public offering (IPO), and subsequent rise in its share price, created three billionaires and an estimated 12,000 millionaires among Microsoft employees. Since the 1990s, it has increasingly diversified from the operating system market and has made a number of corporate acquisitions, their largest being the acquisition of LinkedIn for $26.2 billion in December 2016, followed by their acquisition of Skype Technologies for $8.5 billion in May 2011. Microsoft said- 4.4 crore users used hacked username-password


Microsoft revealed that about 4.4 crore of its users are using hacked passwords and user names for login. This flaw came to light when Microsoft's research team conducted data analysis. The team scanned the account between January and March. It turned out that these accounts are using hacked passwords and usernames on Azure and other similar platforms. Microsoft said- 4.4 crore users used hacked password-username



According to a PC Mag report, the company's research team matched the database of more than 3 billion passwords and user names leaked in 2019. In this, the accounts of more than 4.4 crore users were matched with it. The company said that users whose accounts were matched, were asked to reset the password. hacked password

99.9% hacking failed by MFA

Microsoft said - The number of hacked accounts shows that 99.9% of hacking was thwarted through multi-factor authentication (MFA). We told users that MFA is an important system for online account security. We suggested users to strengthen the password. Many users' passwords were weak.