Skip to content

Latest commit

 

History

History
43 lines (23 loc) · 1.01 KB

README.md

File metadata and controls

43 lines (23 loc) · 1.01 KB
Raw

Cheburek

cheburek

What is this?

Cheburek is a Burp extension that allows to detect if an email address has been compromised in a data breach.

Demo

Here is an example when Cheburek has found breached account in my local DB with breaches.

Demo2

How does it work?

Easy Peasy!

Extension uses https://haveibeenpwned.com/ API for checking if email address is in different data breacheas.
Also Cheburek allows you to use your own breach db (Collection#1 for example)

Requirements

  • Burp Suite Professional (version 1.6 or later)
  • Standalone Jython 2.5 or later

Release Notes

Version 0.0.1 (06 July, 2018):

  • Initial Public Release

Version 0.0.2 (19 February, 2019):

  • Add search in local breach db

TODO

  • Improve the regular expression for extracting email
  • Add search in local breach db
  • Multithreading!