• We just launched and are currently in beta. Join us as we build and grow the community.

Cr3dOv3r: A Credential Reuse Attack Tool

Henryy

Cloud Penetrator
Divine
H Rep
0
0
0
Rep
0
H Vouches
0
0
0
Vouches
0
Posts
154
Likes
165
Bits
2 MONTHS
2 2 MONTHS OF SERVICE
LEVEL 1 400 XP
Yellow-and-Black-Pattern-Company-Meeting-Presentation.png


Hey Folks, In this tutorial we will present an interesting tool, which is used only for credential reuse attacks. Cr3dOv3r is a python-based tool, which simply uses email address for credential reuse attack. In short, if you have a user’s email and password, you can easily find out which social media platforms have credentials active on them.

Lets take a look 🙂 !!

Installation

It is an open source and free to use, therefore we can download this tool from the github page by using the git command.

git clone https://github.com/D4Vinci/Cr3dOv3r.git1git clone

We need to go to the directory to start this tool.

cd Cr3dOv3r/1cd Cr3dOv3r/

We will execute the following command to fulfill the requirement of this tool.

python3 -m pip install -r requirements.txt1python3-mpip install-rrequirements.txt

1-9.png


Now we are ready to start this tool.

  • -h, –help show this help message and exit
  • -p Don’t check for leaks or plain text passwords.
  • -np Don’t check for plain text passwords.
  • -q Quiet mode (no banner).

python3 Cr3d0v3r.py -h1python3 Cr3d0v3r.py-h

2-12.png


For this mission, we need to choose the specific email address we want to achieve. Now execute the following command.

python3 Cr3d0v3r.py [email protected] Cr3d0v3r.py [email protected]

3-8.png


BOOM !! As you can see we did not know that this email was available on Twitter. Just like that you can try some features of this tool and get more information â„ą .

4-8.png
About the AuthorShubham Goyal Certified Ethical Hacker, information security analyst, penetration tester and researcher. Can be Contact on Linkedin.
 

432,230

312,541

312,550

Top