Pepe - Collect Data Almost E-Mail Addresses From Pastebin

Collect information near leaked electronic mail addresses from Pastebin

About
Script parses Pastebin email:password dumps together with get together information near each electronic mail address. It supports Google, Trumail, Pipl, FullContact together with HaveIBeenPwned. Moreover, it allows you lot to shipping an informational postal service to someone near his leaked password, at the terminate every information lands inward Elasticsearch for farther exploration.

It supports alone ane format - email:password.
Everything else volition non work!
For now, notification plant when it finds jibe on FullContact together with side past times side sends you lot electronic mail address together with associated social media accounts.

Requirements:

Python 3
FullContact API https://www.fullcontact.com/developer/
Google
Pipl API https://pipl.com/api/
HaveIBeenPwned
SafePush (for notification - optional - In progress) https://www.pushsafer.com/
Trumail https://trumail.io/
Gmail draw of piece of employment organisation human relationship (sending emails)
Elasticsearch (optional)

pip install -r requirements

Config

{"domains":   { #domains to whitelist or blacklist  "whitelist": [""],  "blacklist": ["yahoo.com"] }, "keys":   { #API KEYS  "pushsafer": "API_KEY",  "fullcontact": "API_KEY",  "pipl": "API_KEY" }, "gmail":   { #GMAIL credentials together with informational message that volition live shipping  "username": "your_username@gmail.com",  "password": "password",  "message": "Hey,\n\nI am a safety researcher together with I desire to inform you lot that your password !PASSWORD! has been leaked together with you lot should modify it immediately.\nThis electronic mail is business office of the research, you lot tin give the sack notice to a greater extent than near it on https://medium.com/@wojciech\n\nStay safe!"}, "elasticsearch":  { #ElasticSearch connection information  "host": "127.0.0.1",  "port": 9200} }

Usage

root@kali: /PycharmProjects/pepe# python pepe.py -h usage: pepe.py [-h] [--file FILE] [--stream] [--interactive]                  [--modules MODULES [MODULES ...]] [--elasticsearch]                  [--whitelist] [--blacklist]                              ,=.               ,=''''==.__.="  o".___         ,=.=="                  ___/   ,==.,"    ,          , \,===""  <     ,==)  "'"=._.==)    `==''    `"           `    clover/snark^   http://ascii.co.uk/art/platypus      Post Exploitation Pastebin Emails   github.com/woj-ciech   medium.com/@woj_ciech      Example:   python pepe.py --file  --interactive --whitelist   python pepe.py --file  --modules hibp google trumail --elasticsearch --blacklist  optional arguments:   -h, --help            demo    this assistance message together with travel out   --file FILE           Load file   --stream              Stream Pastebin   --interactive         Interactive means   --modules MODULES [MODULES ...]                         Modules to banking venture check inward non-interactive means   --elasticsearch       Output to ElasticSearch   --whitelist           Whitelist   --blacklist           Blacklist

Example
Interactive mode, each electronic mail is checked individually together with specific module is executed.

root@kali: /PycharmProjects/pepe# python pepe.py --file paste.txt --interactive --blacklist  -----------------------Found electronic mail [REDACTED]@hotmail.com amongst password [REDACTED]----------------------- [A] Add domain hotmail.com to blacklist [T] Test [G] Google search [H] HaveIBeenPwned [P] Pipl [F] FullContact [I] Inform [N] Next > G ---Google Search--- http://[REDACTED] http://[REDACTED] http://[REDACTED]  [A] Add domain gmail.com to blacklist [T] Test [G] Google search [H] HaveIBeenPwned [P] Pipl [F] FullContact [I] Inform [N] Next > north -----------------------Found electronic mail [REDACTED].[REDACTED]@gmail.com amongst password [REDACTED]----------------------- [A] Add domain gmail.com to blacklist [T] Test [G] Google search [H] HaveIBeenPwned [P] Pipl [F] FullContact [I] Inform [N] Next > F ---FullContact--- [REDACTED] [REDACTED]<   br/>https://twitter.com/[REDACTED] https://facebook.com/[REDACTED] https:/linkedin.com/[REDACTED] [A] Add domain gmail.com to blacklist [T] Test [G] Google search [H] HaveIBeenPwned [P] Pipl [F] FullContact [I] Inform [N] Next > P ---Pipl--- Name: [REDACTED] [REDACTED] years sometime Jobs: Quality Control [REDACTED] (since 2018) [REDACTED] Review [REDACTED] (2017-2018) [REDACTED] Attorney [REDACTED] (2017-2018) [REDACTED] Attorney at [REDACTED] (2017-2017) ... [REDACTED] (2012-2012) [REDACTED] Assistant at [REDACTED] (2012-2012) Author/Founder at [REDACTED] (2009-2011) https://www.linkedin.com/in/[REDACTED] http://www.facebook.com/people/[REDACTED] http://twitter.com/[REDACTED] http://pinterest.com/[REDACTED] https://plus.google.com/[REDACTED]  ... [REDACTED]

Non-interactive mode, when alone choosen modules are executed against electronic mail addressess.

root@kali: /PycharmProjects/# python pepe.py --file pastetest.txt --blacklist --modules hibp google fullcontact trumail --elasticsearch -----------------------Found electronic mail [REDACTED]@hotmail.com amongst password [REDACTED]----------------------- ---Google Search--- https://pastebin.com/[REDACTED] ---Have I Been Pwned--- LinkedIn ---FullContact--- No results ---Trumail--- Email exam passed -----------------------Found electronic mail charlie.[REDACTED]@live.com amongst password [REDACTED]----------------------- ---Google Search--- https://justpaste.it/[REDACTED] https://pastebin.com/[REDACTED] ---Have I Been Pwned--- MyHeritage RiverCityMedia Tumblr YouveBeenScraped ---FullContact--- Charlie [REDACTED] https://twitter.com/[REDACTED] [REDACTED] ---Trumail--- Email exam passed -----------------------Found electronic mail [REDACTED].[REDACTED]@gmail.com amongst password [REDACTED]-----------------------    ---Google Search--- http://[REDACTED] http://[REDACTED] http://[REDACTED] https://pastebin.com/[REDACTED] ---Have I Been Pwned--- BTSec Exactis HauteLook Houzz LinkedIn ---FullContact--- [REDACTED] [REDACTED] https://www.facebook.com/[REDACTED] [REDACTED] ---Trumail--- Email exam passed -----------------------Found electronic mail [REDACTED].[REDACTED]@gmail.com amongst password [REDACTED]----------------------- ---Google Search--- https://[REDACTED] https://[REDACTED] https://[REDACTED] https://pastebin.com/[REDACTED] ---Have I Been Pwned--- Lastfm LinkedIn MySpace Trillian Tumblr ---FullContact--- [REDACTED] [REDACTED] [REDACTED]. https://www.facebook.com/[REDACTED] https://plus.google.com/[REDACTED] https://www.linkedin.com/in/[REDACTED] http://www.pinterest.com/[REDACTED] https://twitter.com/[REDACTED] https://youtube.com/user/[REDACTED] [REDACTE   D]

Screens