/PasSkull

Managing 'Password Dump' Web Platform

Primary LanguagePythonMIT LicenseMIT

PasSkull

​ PasSkull is a web tool for manage Password Dump from the internet.

Prerequisites

Please install Cassandra.

$ echo "deb https://downloads.apache.org/cassandra/debian 311x main" | sudo tee -a /etc/apt/sources.list.d/cassandra.sources.list
$ curl https://downloads.apache.org/cassandra/KEYS | sudo apt-key add -
$ sudo apt-get update
$ sudo apt-get install cassandra
$ sudo pip3 install cassandra-driver
$ sudo apt-get install build-essential python-dev python3-pip libev4 libev-dev -y

​

PasSkull Installation

Download the PasSkull folder and install with pip. ​

$ sudo pip3 install -r requirement.txt

with MFA

$ python3 app.py

without MFA #TODO:WIP!

$ python3 app_no_MFA.py

Supported ​

  • Searching by user name.
  • Searching by email address.
  • Searching by domain.
  • Searching by users list.
  • Searching by hash list.
  • Getting random credentials from DB.
  • Multiple users (admin and regular).

TODO

  • while search hash show only hash and passwords (uniq).
  • MFA test after create user.
  • fix DeprecationWarning from WTForms.

Additional Information

Cassandra need Storage for data!

disclaimer: saving leaked passwords data is illegal. This project is meant for study purposes only, use at your own risk!

Thanks

  • Shirlyrl for contribute and help.

Contributions..

​ ..are always welcome.