Cr3dOv3r 0.2 – Know The Dangers Of Credential Reuse Attacks

Your best friend in credential reuse attacks.Cr3dOv3r simply you give it an email then it does two simple jobs (but useful) :Search for public leaks for the email and if it any, it returns with all available details about the leak (Using hacked-emails site API).Now you give it this email’s old or leaked password then it checks this credentials against 16 websites (ex: facebook, twitter, google…) then it tells you if login successful in any website!Imagine with me this scenarioYou checking a targeted email with this tool.The tool finds it in a leak so you open the leakage link.You get the leaked password after searching the leak.Now you back to the tool and enters this password to check if there’s any website the user uses the same password in it.You imagine the restScreenshotsUsageusage: Cr3d0v3r.py [-h] emailpositional arguments: email Email/username to checkaoptional arguments: -h, –help show this help message and exitInstalling and requirementsTo make the tool work at its best you must have :Python 3.x.Linux or windows system.The requirements mentioned in the next few lines.Installing+For windows : (After downloading ZIP and upzip it)cd Cr3dOv3r-masterpython -m pip install -r win_requirements.txtpython Cr3dOv3r.py -h+For linux :git clone https://github.com/D4Vinci/Cr3dOv3r.gitchmod 777 -R Cr3dOv3r-mastercd Cr3dOv3r-masterpip3 install -r requirements.txtpython Cr3dOv3r.py -hIf you want to add a website to the tool, follow the instructions in the wikiContactTwitterDownload Cr3dOv3r

Link: http://feedproxy.google.com/~r/PentestTools/~3/C8fSg83b9Oo/cr3dov3r-02-know-dangers-of-credential.html