Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Only One target in textfile is used for Compromised password and not the others #156

Open
1 task done
Fabinout opened this issue Feb 13, 2023 · 2 comments
Open
1 task done

Comments

@Fabinout
Copy link

Fabinout commented Feb 13, 2023

Issues not respecting the issue template will be closed without being read, thank you.

Checkbox

  • I have thoroughly checked the answer is not in the wiki.

Env

  • h8mail version: 2.5.6
  • Python version: 2.7.10
  • Operating System: Mac OS 10.12.6

Description

When I'm targeting one username, it works and find breaches

$ h8mail -t fabien.lamarque -q username -bc . -sk

        Session Recap:  


             Target                  |                   Status                  

        fabien.lamarque              |          Breach Found (2 elements)         

When I'm targeting one random unused username, it works as expected (no breach)

$ h8mail -t foobar.randomlastname -q username -bc . -sk

-> Not compromised

What I Did

When I merged both targets in a text file called merged.txt and ran this command

$ h8mail -t merged.txt -q username -bc . -sk

One time he looks for breach for user fabien.lamarque and find breaches correctly

  CompilationOfManyBreaches h8mail  -t merged.txt -q username -bc .  -sk  

 		  Official h8mail posts: 
		  https://khast3x.club/tags/h8mail/

 
	  Version 2.5.6 - "ROCKSMASSON.6"  
 
 	._____. ._____.     ;____________;
 	| ._. | | ._. |     ;   h8mail   ;
 	| !_| |_|_|_! |     ;------------;
 	!___| |_______!  Heartfelt Email OSINT
 	.___|_|_| |___.    Use responsibly
 	| ._____| |_. | ;____________________;
 	| !_! | | !_! | ; github.com/khast3x ;
 	!_____! !_____! ;--------------------;
 	
[>] h8mail is up to date
[~] Reading from file merged.txt
[~] Parsing emails frommerged.txt
[~] Removing duplicates
[>] Targets:
[>] fabien.lamarque
[>] foobar.randomlastname
[~] Target factory started for fabien.lamarque
[~] Target factory started for foobar.randomlastname
[~] Worker [22096] is searching for targets in ./data/f/a/b (87 MB)
[>] Found occurrence [./data/f/a/b] Line 860119: fabien.lamarque@gmail.com:la****
[>] Found occurrence [./data/f/a/b] Line 860120: fabien.lamarque@gmail.com:wa*****
[~] Terminating worker pool
[~] Worker [22105] is searching for targets in ./data/f/a/f (6 MB)
[~] Terminating worker pool
[~] Removing fabien.lamarque@gmail.com:la***** (cleaning function)
[~] Removing fabien.lamarque@gmail.com:wa***** (cleaning function)

 __________________________________________________________________________________________
 
[>] Showing results for fabien.lamarque

 __________________________________________________________________________________________
 
[>] Showing results for foobar.randomlastname
__________________________________________________________________________________________



                                   Session Recap:  


                 Target                  |                   Status                  
__________________________________________________________________________________________

            fabien.lamarque              |          Breach Found (2 elements)         
__________________________________________________________________________________________

         foobar.randomlastname           |               Not Compromised              
__________________________________________________________________________________________

Execution time (seconds):   6.243665933609009  

the other time, he only uses the second target, and find nothing

  CompilationOfManyBreaches h8mail  -t merged.txt -q username -bc .  -sk

 		  Official h8mail posts: 
		  https://khast3x.club/tags/h8mail/

 
	  Version 2.5.6 - "ROCKSMASSON.6"  
 
 	._____. ._____.     ;____________;
 	| ._. | | ._. |     ;   h8mail   ;
 	| !_| |_|_|_! |     ;------------;
 	!___| |_______!  Heartfelt Email OSINT
 	.___|_|_| |___.    Use responsibly
 	| ._____| |_. | ;____________________;
 	| !_! | | !_! | ; github.com/khast3x ;
 	!_____! !_____! ;--------------------;
 	
[>] h8mail is up to date
[~] Reading from file merged.txt
[~] Parsing emails frommerged.txt
[~] Removing duplicates
[>] Targets:
[>] foobar.randomlastname
[>] fabien.lamarque
[~] Target factory started for foobar.randomlastname
[~] Target factory started for fabien.lamarque
[~] Worker [22126] is searching for targets in ./data/f/o (229 MB)
[~] Terminating worker pool
[~] Worker [22134] is searching for targets in ./data/f/f (32 MB)
[~] Terminating worker pool

 __________________________________________________________________________________________
 
[>] Showing results for foobar.randomlastname

 __________________________________________________________________________________________
 
[>] Showing results for fabien.lamarque
__________________________________________________________________________________________



                                   Session Recap:  


                 Target                  |                   Status                  
__________________________________________________________________________________________

         foobar.randomlastname           |               Not Compromised              
__________________________________________________________________________________________

            fabien.lamarque              |               Not Compromised              
__________________________________________________________________________________________

Execution time (seconds):   17.49519371986389  

This is a simple test, but my real-case merged text file is bigger and h8mail only look for 1 username breach.

@Fabinout Fabinout changed the title Targets in file are not all checked Only One target in textfile is used for Compromised password and not the others Feb 13, 2023
@cyb3rw0lf
Copy link

same issue

@cyb3rw0lf
Copy link

The problem is the breachcomp_path variable is not reset after first iteration and from second target the search is broken.
I sent pull request #165

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants