🔐 BreachHunter - Advanced Email & Password Security Auditing Tool

Professional tool for checking email and password breaches across multiple databases - CHDEVSEC Pentest Recon

📋 Table of Contents

• Features
• Installation
• Basic Usage
• Advanced Options
• API Integration
• Reports
• Examples
• Disclaimer
• License

🚀 Features

🔥 Core Functionality

Feature	Description
Multi-API Integration	Check across Breached.me, LeakCheck.io & HaveIBeenPwned
Batch Processing	Process thousands of emails from .txt files
Smart Validation	Email format validation before checking
Rate Limiting	Configurable delays to respect APIs

🛡️ Security Checks

# Email Security Status
email@domain.com  → Breached (Sources: Adobe 2013, LinkedIn 2012)
password123       → Compromised 15,000+ times

📊 Output Formats

# Supported Formats
- CSV (detailed spreadsheet)
- LOG (audit trail)
- Console (colored output)

🛠️ Installation

Prerequisites

# Verify Python version
python3 --version  # Requires 3.6+

Installation Steps

# Clone repository
git clone https://github.com/chdevsec/BreachHunter.git
cd BreachHunter

# Install dependencies
pip install -r requirements.txt

Requirements

requests>=2.25.1
tqdm>=4.62.0
colorama>=0.4.4

🎯 Basic Usage

python3 checker_emails.py [OPTIONS]

Example Scan

python3 checker_emails.py --email user@domain.com --password mypassword123

⚙️ Advanced Options

Option	Description	Default
--email	Single email check	None
--file	Email list file (.txt)	None
--password	Password to check	None
--output	CSV output file	resultado_emails.csv
--sleep	Delay between requests	1.5
--silent	Silent mode (no prints)	False
--log	Log file output	None

🔧 API Integration

Supported APIs

[
    "Breached.me",        # Email breach database
    "LeakCheck.io",       # Public leak checker
    "HaveIBeenPwned",     # Password breach API (SHA-1)
]

API Response Handling

{
    "email_status": "Breached",
    "sources": ["Adobe 2013", "LinkedIn 2012"],
    "fields_leaked": "email,password,name",
    "password_count": 15000
}

📊 Report Samples

CSV Report Preview

Email	Breached.me	LeakCheck Status	Leaked Fields	Breach Sources	Password Status	Final Status
user@test.com	Breached	Breached	email,password	Adobe 2013; LinkedIn 2012	Leaked 15000 times	Breached

Console Output

[Breached] - john@example.com | Password: Leaked 5432 times
[Secure] - safe@domain.com | Password: Not found in breaches

💡 Usage Examples

Example 1: Single Email Check

python3 checker_emails.py --email test@example.com

Example 2: Batch Email Processing

python3 checker_emails.py --file email_list.txt --output company_audit.csv

Example 3: Password-Only Check

python3 checker_emails.py --password mySecretPassword123

Example 4: Full Security Audit

python3 checker_emails.py --file corporate_emails.txt \
  --password CompanyPassword2023 \
  --output security_audit.csv \
  --log audit_trail.log \
  --sleep 2.0

Example 5: Silent Mode for Automation

python3 checker_emails.py --file emails.txt --silent --output results.csv

🔍 File Formats

Input File (emails.txt)

admin@company.com
user1@domain.org
security@website.net

Output CSV Structure

Email,Breached.me,LeakCheck Status,Leaked Fields,Breach Sources,Password Status,Final Status
test@example.com,Breached,Breached,email;password,Adobe 2013,Leaked 1500 times,Breached
safe@domain.com,Secure,Secure,,,Not found,Secure

🛡️ Security & Privacy

Privacy Protection

• No Data Storage: APIs don't store queried data
• SHA-1 Hashing: Passwords checked via k-anonymity
• HTTPS Only: All communications encrypted
• Local Processing: No cloud dependencies

Rate Limiting

# Configurable delays
--sleep 1.5   # Default: 1.5 seconds
--sleep 3.0   # Conservative: 3.0 seconds

📈 Interpreting Results

Status Indicators

🔴 Breached    # Found in breach databases
🟢 Secure      # Not found in known breaches  
🟡 Error       # API connection issues
⚪ Invalid     # Email format validation failed

Password Breach Counts

Leaked 15,000+ times  # High risk - change immediately
Leaked 1-100 times    # Medium risk - consider changing
Not found             # Secure - not in known breaches

⚠️ Legal Disclaimer

This tool was developed for educational purposes and authorized security testing. The use of this tool is entirely the user's responsibility. Make sure you have explicit authorization before testing any system.

Responsible Use

• ✅ Test only on your own systems or with explicit authorization
• ✅ Respect the terms of service of the APIs used
• ✅ Use rate limiting to avoid server overload
• ✅ Obtain proper consent before checking third-party emails
• ❌ Do not use for malicious or illegal activities
• ❌ Do not test emails without permission
• ❌ Do not violate privacy rights of others

🚨 IMPORTANT LEGAL NOTICE

AUTHORIZED USE ONLY: This software is intended for:

• Personal security audits of your own accounts
• Authorized penetration testing engagements
• Corporate security assessments with proper approval
• Educational and research purposes

PROHIBITED ACTIVITIES:

• Testing emails/passwords without explicit authorization
• Violating privacy rights of individuals
• Accessing systems without permission
• Any illegal or malicious activities

The developer is NOT RESPONSIBLE for any misuse of this tool. Users must comply with all applicable laws and regulations.

📄 License

This project is licensed under the MIT License - see the LICENSE file for details.

---

🔒 Developed by CHDEVSEC | Pentester Caio Henrique

⭐ If this project was useful to you, consider giving it a star!

📚 Tags and Keywords

email-breach-checker password-breach-checker security-audit pentest cybersecurity data-breach haveibeenpwned leakcheck breached.me vulnerability-scanner security-testing python automation breach-detection password-security email-security osint reconnaissance penetration-testing security-tools red-team blue-team incident-response threat-intelligence security-assessment compliance-audit data-protection privacy-security corporate-security information-security