h8mail icon indicating copy to clipboard operation
h8mail copied to clipboard

Only One target in textfile is used for Compromised password and not the others

Open Fabinout opened this issue 2 years ago • 2 comments

Issues not respecting the issue template will be closed without being read, thank you.

Checkbox

  • [X] I have thoroughly checked the answer is not in the wiki.

Env

  • h8mail version: 2.5.6
  • Python version: 2.7.10
  • Operating System: Mac OS 10.12.6

Description

When I'm targeting one username, it works and find breaches

$ h8mail -t fabien.lamarque -q username -bc . -sk

        Session Recap:  


             Target                  |                   Status                  

        fabien.lamarque              |          Breach Found (2 elements)         

When I'm targeting one random unused username, it works as expected (no breach)

$ h8mail -t foobar.randomlastname -q username -bc . -sk

-> Not compromised

What I Did

When I merged both targets in a text file called merged.txt and ran this command

$ h8mail -t merged.txt -q username -bc . -sk

One time he looks for breach for user fabien.lamarque and find breaches correctly

  CompilationOfManyBreaches h8mail  -t merged.txt -q username -bc .  -sk  

 		  Official h8mail posts: 
		  https://khast3x.club/tags/h8mail/

 
	  Version 2.5.6 - "ROCKSMASSON.6"  
 
 	._____. ._____.     ;____________;
 	| ._. | | ._. |     ;   h8mail   ;
 	| !_| |_|_|_! |     ;------------;
 	!___| |_______!  Heartfelt Email OSINT
 	.___|_|_| |___.    Use responsibly
 	| ._____| |_. | ;____________________;
 	| !_! | | !_! | ; github.com/khast3x ;
 	!_____! !_____! ;--------------------;
 	
[>] h8mail is up to date
[~] Reading from file merged.txt
[~] Parsing emails frommerged.txt
[~] Removing duplicates
[>] Targets:
[>] fabien.lamarque
[>] foobar.randomlastname
[~] Target factory started for fabien.lamarque
[~] Target factory started for foobar.randomlastname
[~] Worker [22096] is searching for targets in ./data/f/a/b (87 MB)
[>] Found occurrence [./data/f/a/b] Line 860119: [email protected]:la****
[>] Found occurrence [./data/f/a/b] Line 860120: [email protected]:wa*****
[~] Terminating worker pool
[~] Worker [22105] is searching for targets in ./data/f/a/f (6 MB)
[~] Terminating worker pool
[~] Removing [email protected]:la***** (cleaning function)
[~] Removing [email protected]:wa***** (cleaning function)

 __________________________________________________________________________________________
 
[>] Showing results for fabien.lamarque

 __________________________________________________________________________________________
 
[>] Showing results for foobar.randomlastname
__________________________________________________________________________________________



                                   Session Recap:  


                 Target                  |                   Status                  
__________________________________________________________________________________________

            fabien.lamarque              |          Breach Found (2 elements)         
__________________________________________________________________________________________

         foobar.randomlastname           |               Not Compromised              
__________________________________________________________________________________________

Execution time (seconds):   6.243665933609009  

the other time, he only uses the second target, and find nothing

  CompilationOfManyBreaches h8mail  -t merged.txt -q username -bc .  -sk

 		  Official h8mail posts: 
		  https://khast3x.club/tags/h8mail/

 
	  Version 2.5.6 - "ROCKSMASSON.6"  
 
 	._____. ._____.     ;____________;
 	| ._. | | ._. |     ;   h8mail   ;
 	| !_| |_|_|_! |     ;------------;
 	!___| |_______!  Heartfelt Email OSINT
 	.___|_|_| |___.    Use responsibly
 	| ._____| |_. | ;____________________;
 	| !_! | | !_! | ; github.com/khast3x ;
 	!_____! !_____! ;--------------------;
 	
[>] h8mail is up to date
[~] Reading from file merged.txt
[~] Parsing emails frommerged.txt
[~] Removing duplicates
[>] Targets:
[>] foobar.randomlastname
[>] fabien.lamarque
[~] Target factory started for foobar.randomlastname
[~] Target factory started for fabien.lamarque
[~] Worker [22126] is searching for targets in ./data/f/o (229 MB)
[~] Terminating worker pool
[~] Worker [22134] is searching for targets in ./data/f/f (32 MB)
[~] Terminating worker pool

 __________________________________________________________________________________________
 
[>] Showing results for foobar.randomlastname

 __________________________________________________________________________________________
 
[>] Showing results for fabien.lamarque
__________________________________________________________________________________________



                                   Session Recap:  


                 Target                  |                   Status                  
__________________________________________________________________________________________

         foobar.randomlastname           |               Not Compromised              
__________________________________________________________________________________________

            fabien.lamarque              |               Not Compromised              
__________________________________________________________________________________________

Execution time (seconds):   17.49519371986389  

This is a simple test, but my real-case merged text file is bigger and h8mail only look for 1 username breach.

Fabinout avatar Feb 13 '23 14:02 Fabinout

same issue

cyb3rw0lf avatar Aug 15 '23 09:08 cyb3rw0lf

The problem is the breachcomp_path variable is not reset after first iteration and from second target the search is broken. I sent pull request #165

cyb3rw0lf avatar Aug 15 '23 10:08 cyb3rw0lf