{"id":13452594,"url":"https://github.com/wKovacs64/pwned","last_synced_at":"2025-03-23T19:34:32.202Z","repository":{"id":37849527,"uuid":"55828901","full_name":"wKovacs64/pwned","owner":"wKovacs64","description":"A command-line tool for querying the 'Have I been pwned?' service.","archived":false,"fork":false,"pushed_at":"2025-03-18T23:19:46.000Z","size":12192,"stargazers_count":232,"open_issues_count":2,"forks_count":27,"subscribers_count":8,"default_branch":"main","last_synced_at":"2025-03-19T19:42:45.225Z","etag":null,"topics":["breach","dump","hack","hacktoberfest","haveibeenpwned","hibp","passwords","pastes","pwned","security"],"latest_commit_sha":null,"homepage":"https://wkovacs64.github.io/pwned","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/wKovacs64.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG-6.x.md","contributing":"CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null},"funding":{"github":"wKovacs64"}},"created_at":"2016-04-09T06:07:19.000Z","updated_at":"2025-03-18T23:19:49.000Z","dependencies_parsed_at":"2024-11-07T02:19:43.981Z","dependency_job_id":"fa73bf0f-4a0d-4d27-bcb5-b9acd345ec12","html_url":"https://github.com/wKovacs64/pwned","commit_stats":{"total_commits":2580,"total_committers":5,"mean_commits":516.0,"dds":0.531782945736434,"last_synced_commit":"b560751d2eaf9d4e5124391ce5cd4b9e7fb981d3"},"previous_names":[],"tags_count":41,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/wKovacs64%2Fpwned","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/wKovacs64%2Fpwned/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/wKovacs64%2Fpwned/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/wKovacs64%2Fpwned/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/wKovacs64","download_url":"https://codeload.github.com/wKovacs64/pwned/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":244498261,"owners_count":20462344,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["breach","dump","hack","hacktoberfest","haveibeenpwned","hibp","passwords","pastes","pwned","security"],"created_at":"2024-07-31T07:01:28.585Z","updated_at":"2025-03-23T19:34:32.171Z","avatar_url":"https://github.com/wKovacs64.png","language":"TypeScript","funding_links":["https://github.com/sponsors/wKovacs64"],"categories":["TypeScript","security"],"sub_categories":[],"readme":"\u003ca href=\"https://wkovacs64.github.io/pwned\"\u003e\n  \u003cimg\n    alt=\"logo\"\n    title=\"logo\"\n    src=\"https://wkovacs64.github.io/pwned/logo.png\"\n    align=\"right\"\n    width=\"85\"\n  /\u003e\n\u003c/a\u003e\n\n# pwned\n\n_A command-line tool for querying [Troy Hunt][troy]'s [Have I been pwned?][haveibeenpwned] service\nusing the [hibp][hibp] Node.js module._\n\n[![npm Version][npm-image]][npm-url] [![Build Status][ci-image]][ci-url]\n[![Code Coverage][coverage-image]][coverage-url]\n\n## Installation\n\nDownload and install [Node.js][nodejs], then install `pwned` globally using `npm`:\n\n```shell\nnpm install pwned -g\n```\n\nAlternatively, you can run it on-demand using the [`npx`][npx] package runner:\n\n```shell\nnpx pwned\n```\n\n## Protected Commands\n\nOn July 18th, 2019, the haveibeenpwned.com API moved several services behind authentication,\nrequiring an API key. See [Troy's blog post][api-key-blog-post] for rationale and a full\nexplanation. In order to use some of `pwned` commands (e.g. `ba`, `pa`, and `search`), you will need\nto [get an API key][get-api-key] and run `pwned apiKey` to configure `pwned`. The other commands do\nnot require an API key and you may use them without obtaining one.\n\n## Usage\n\n```\npwned \u003ccommand\u003e\n\nCommands:\n  pwned apiKey [key]            set the API key to be used for authenticated requests\n  pwned ba \u003caccount|email\u003e      get all breaches for an account (username or email address)\n  pwned breach \u003cname\u003e           get a single breached site by breach name\n  pwned breaches                get all breaches in the system\n  pwned dc                      get all data classes in the system\n  pwned pa \u003cemail\u003e              get all pastes for an account (email address)\n  pwned pw \u003cpassword\u003e           securely check a password for public exposure\n  pwned search \u003caccount|email\u003e  search breaches and pastes for an account (username or email\n                                address)\n  pwned subStatus               get the subscription status of your API key\n\nOptions:\n  -h, --help     Show help                                                                 [boolean]\n  -v, --version  Show version number                                                       [boolean]\n```\n\n#### Examples\n\nGet all breaches for an account:\n\n```\n$ pwned ba pleasebeclean@fingerscrossed.tld\n✔ Good news — no pwnage found!\n```\n\nGet all breaches in the system, filtering results to just the 'adobe.com' domain:\n\n```\n$ pwned breaches -d adobe.com\n-\n  Title:        Adobe\n  Name:         Adobe\n  Domain:       adobe.com\n  BreachDate:   2013-10-04\n  AddedDate:    2013-12-04T00:00:00Z\n  ModifiedDate: 2013-12-04T00:00:00Z\n  PwnCount:     152445165\n  Description:  In October 2013, 153 million Adobe accounts were breached with each containing an internal ID, username, email, \u003cem\u003eencrypted\u003c/em\u003e password and a password hint in plain text. The password cryptography was poorly done and \u003ca href=\"http://stricture-group.com/files/adobe-top100.txt\" target=\"_blank\" rel=\"noopener\"\u003emany were quickly resolved back to plain text\u003c/a\u003e. The unencrypted hints also \u003ca href=\"http://www.troyhunt.com/2013/11/adobe-credentials-and-serious.html\" target=\"_blank\" rel=\"noopener\"\u003edisclosed much about the passwords\u003c/a\u003e adding further to the risk that hundreds of millions of Adobe customers already faced.\n  DataClasses:\n    - Email addresses\n    - Password hints\n    - Passwords\n    - Usernames\n  IsVerified:   true\n  IsFabricated: false\n  IsSensitive:  false\n  IsActive:     true\n  IsRetired:    false\n  IsSpamList:   false\n  LogoType:     svg\n```\n\nGet a single breached site by breach name:\n\n```\n$ pwned breach MyCompany\n✔ No breach found by that name.\n```\n\nGet all the data classes in the system, returning raw JSON results for external/chained consumption:\n\n```\n$ pwned dc --raw\n[\"Account balances\",\"Address book contacts\",\"Age groups\",\"Ages\",\"Apps installed on devices\",\"Astrological signs\",\"Auth tokens\",\"Avatars\",\"Bank account numbers\",\"Banking PINs\",\"Beauty ratings\",\"Biometric data\",\"Browser user agent details\",\"Buying preferences\",\"Car ownership statuses\",\"Career levels\",\"Cellular network names\",\"Charitable donations\",\"Chat logs\",\"Credit card CVV\",\"Credit cards\",\"Credit status information\",\"Customer feedback\",\"Customer interactions\",\"Dates of birth\",\"Deceased date\",\"Deceased statuses\",\"Device information\",\"Device usage tracking data\",\"Drinking habits\",\"Drug habits\",\"Eating habits\",\"Education levels\",\"Email addresses\",\"Email messages\",\"Employers\",\"Ethnicities\",\"Family members' names\",\"Family plans\",\"Family structure\",\"Financial investments\",\"Financial transactions\",\"Fitness levels\",\"Genders\",\"Geographic locations\",\"Government issued IDs\",\"Health insurance information\",\"Historical passwords\",\"Home ownership statuses\",\"Homepage URLs\",\"IMEI numbers\",\"IMSI numbers\",\"Income levels\",\"Instant messenger identities\",\"IP addresses\",\"Job titles\",\"MAC addresses\",\"Marital statuses\",\"Names\",\"Nationalities\",\"Net worths\",\"Nicknames\",\"Occupations\",\"Parenting plans\",\"Partial credit card data\",\"Passport numbers\",\"Password hints\",\"Passwords\",\"Payment histories\",\"Payment methods\",\"Personal descriptions\",\"Personal health data\",\"Personal interests\",\"Phone numbers\",\"Physical addresses\",\"Physical attributes\",\"Political donations\",\"Political views\",\"Private messages\",\"Professional skills\",\"Profile photos\",\"Purchases\",\"Purchasing habits\",\"Races\",\"Recovery email addresses\",\"Relationship statuses\",\"Religions\",\"Reward program balances\",\"Salutations\",\"School grades (class levels)\",\"Security questions and answers\",\"Sexual fetishes\",\"Sexual orientations\",\"Smoking habits\",\"SMS messages\",\"Social connections\",\"Social media profiles\",\"Spoken languages\",\"Support tickets\",\"Survey results\",\"Time zones\",\"Travel habits\",\"User statuses\",\"User website URLs\",\"Usernames\",\"Utility bills\",\"Vehicle details\",\"Website activity\",\"Work habits\",\"Years of birth\",\"Years of professional experience\"]\n```\n\nGet all pastes for an email address:\n\n```\n$ pwned pa nobody@nowhere.com\n-\n  Source:     Pastebin\n  Id:         YrpQA60S\n  Title:      null\n  Date:       2018-01-24T07:54:15Z\n  EmailCount: 16476\n-\n  Source:     Pastebin\n  Id:         suPshHZ1\n  Title:      null\n  Date:       2017-09-06T03:41:33Z\n  EmailCount: 20444\n-\n  Source:     Pastebin\n  Id:         xyb8vavK\n  Title:      null\n  Date:       2015-06-01T00:16:46Z\n  EmailCount: 8\n-\n  Source:     Pastebin\n  Id:         DaaFj8Be\n  Title:      CrackingCore - Redder04\n  Date:       2015-04-05T22:22:39Z\n  EmailCount: 116\n-\n  Source:     Pastebin\n  Id:         9MAAgecd\n  Title:      IPTV Yabancı Combolist\n  Date:       2015-02-07T15:21:00Z\n  EmailCount: 244\n-\n  Source:     Pastebin\n  Id:         QMx1dPUT\n  Title:      null\n  Date:       2015-02-02T20:45:00Z\n  EmailCount: 6607\n-\n  Source:     Pastebin\n  Id:         zUFSee4n\n  Title:      nethingoez\n  Date:       2015-01-21T15:13:00Z\n  EmailCount: 312\n-\n  Source:     AdHocUrl\n  Id:         http://siph0n.in/exploits.php?id=4560\n  Title:      BuzzMachines.com 40k+\n  Date:       null\n  EmailCount: 36959\n-\n  Source:     AdHocUrl\n  Id:         http://siph0n.in/exploits.php?id=4737\n  Title:      PayPalSucks Database 102k\n  Date:       null\n  EmailCount: 82071\n-\n  Source:     AdHocUrl\n  Id:         http://balockae.online/files/BlackMarketReloaded_users.sql\n  Title:      balockae.online\n  Date:       null\n  EmailCount: 10547\n```\n\n[Securely][search-by-range] check a password to see if it has been exposed in a data breach:\n\n```\n$ pwned pw Password1234\n⚠ Oh no — pwned 3360 times!\n```\n\nSearch both breaches and pastes for an account (truncating breach data):\n\n```\n$ pwned search nobody\nbreaches:\n  -\n    Name: BattlefieldHeroes\n  -\n    Name: CannabisForum\n  -\n    Name: Forbes\n  -\n    Name: Gawker\n  -\n    Name: HackForums\n  -\n    Name: LoungeBoard\n  -\n    Name: PokemonCreed\n  -\n    Name: Win7Vista\npastes:   null\n```\n\n## License\n\nThis tool is distributed under the [MIT License](LICENSE.txt).\n\n[npm-image]: https://img.shields.io/npm/v/pwned.svg?style=flat-square\n[npm-url]: https://www.npmjs.com/package/pwned\n[ci-image]:\n  https://img.shields.io/github/actions/workflow/status/wKovacs64/pwned/ci.yml?logo=github\u0026style=flat-square\n[ci-url]: https://github.com/wKovacs64/pwned/actions?query=workflow%3Aci\n[coverage-image]: https://img.shields.io/codecov/c/github/wKovacs64/pwned/main.svg?style=flat-square\n[coverage-url]: https://codecov.io/gh/wKovacs64/pwned/branch/main\n[troy]: https://www.troyhunt.com\n[haveibeenpwned]: https://haveibeenpwned.com\n[hibp]: https://github.com/wKovacs64/hibp\n[nodejs]: https://nodejs.org/en/download/\n[npx]: https://medium.com/@maybekatz/introducing-npx-an-npm-package-runner-55f7d4bd282b\n[search-by-range]: https://haveibeenpwned.com/API/v2#SearchingPwnedPasswordsByRange\n[api-key-blog-post]: https://www.troyhunt.com/authentication-and-the-have-i-been-pwned-api/\n[get-api-key]: https://haveibeenpwned.com/API/Key\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FwKovacs64%2Fpwned","html_url":"https://awesome.ecosyste.ms/projects/github.com%2FwKovacs64%2Fpwned","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FwKovacs64%2Fpwned/lists"}