Locate Breached Account Data with H8mail [Tutorial]

[@betticropper7308]

I just wanted to let you know that i find your channel probably top shelf. I find it really easy to follow have noticed my improvements since ive been learning from you , so thank you

[@NullByteWHT]

Thanks Betti Cropper! We really do put in a lot of hard work.

[@mk-rj6vr]

You inspired me to change careers, tinker in cyber security, and finally have a soc role, thank you Kody!

[@BPL-KromBob]

Sadly they haven’t uploaded in like 4 years :(

[@DaddiDrako]

These videos are really the backbone of people getting into and learning cybersecurity

[@liljo3y]

My man Tom didn't deserve this

[@NullByteWHT]

Did you see that man's passwords? He had some demons.

[@SinanAkkoyun]

@@NullByteWHT Did you really attack the guardian on youtube?

[@uhrihriavbenagha1826]

@@SinanAkkoyun leemao

[@iransecurityteam3750]

@@NullByteWHT but how to scrape or harvest password list also ? Can you do a tutorial ? Im thinking the password list will def be hashed MD5 or other hash types

[@Elias-qn2rg]

@@iransecurityteam3750 use slayer leecher or some sort of thing but this could be private you could crack dbs urself but then its not a breach and you are way beyond osint

[@cyber222]

if it say's pip3 command not found you need to install it by apt install python3-pip

[@maxdeb6551]

@@Badkuipeend Not if your in root

[@ArsenGaming]

Badkuipeend I don't want to type out apt-get, also, apt has a nice interface that apt-get doesn't.

[@67hutch]

@@maxdeb6551 can’t he just go “sudo su” then try again?

[@maxdeb6551]

@@67hutch The person i responded to deleted their comment

[@67hutch]

@@maxdeb6551 oh

[@tahmidislam7652]

MY MAN DOESN'T BLINK

[@robi8020]

I love the info about these tools but they are usually a pain in the ass to figure out and use when you are on a non windows system and have to figure out which installer to use and why it’s not working. I usually spend about an hour smashing the keyboard, never get things working, then give up with no results. I don’t understand why great programmers can’t make these tools more readily usable and accessible.

[@positivitychannel5551]

Hi Kody I am a big fan. Could you help me with where I can find the config.ini file I am running it on linux I think I need to switch to windows for that ? Also, not able to find the breach compilation db could you please help?

[@kevinmatip9416]

Privacy is of the utmost importance to me, which is why I am in the Utopia ecosystem. Here I found anonymous communication and much more.

[@adolfTitlerr]

can you share a link of the breach compilation

[@SinanAkkoyun]

Where can I get this breach compilation file??

[@helpme2999]

this

[@SinanAkkoyun]

@@helpme2999 Help me

[@ZxcFleacked]

reddit

[@cbb3062]

Does this work for other languages like lets say it's French or Spanish emails and passwords or would it be different databases

[@showupshowout]

I appreciate all of your hard work! Side note whats the song playing in the background shazam didn't pick it up lol

[@fancywaifu9821]

I have a breach compilation file that is about 9 gigabytes. Not sure if I downloaded the right one or not

[@linuxvideoguy9475]

I keep getting the same error. query.sh no such file or directory ??? And where did you get the breach list from ?

[@uncreativeus3rname787]

Did you ever find this out? :)

[@scottg5728]

Same problem here

[@pyguy9915]

Maybe a dumb question, but it's unclear to me--is it legal to download the breach compilation? There's some discussion on Reddit with folks arguing that it's not legal to store the data since it's stolen, although now that the data are basically public...

[@ShadowEmpathy]

idk, but no comments and likes in 5 years? lemme change that

[@ivancastillo7156]

where can I find this list? asking for a friend that is doing research.....

[@Mega1137Gamez]

How did you get it to list the passwords

[@kobokobo339]

what is the name of the tool you use to connect your smartphone to the computer at the beginning of the video

[@nickhogg5575]

Can u do a video where it's used with the API instead of just locally

[@mplserin]

If you can't figure out how to use the API instead of a breach file (installed locally) yourself, then you may need more knowledge & practice with these tools before you consider doing this yourself.

[@Zakeusa]

You need paid services

[@chaitanyakulkarni6416]

@@mplserin asking for help is the step to learning , that kid is trying to get hep cause he is not smart and experience like you , go easy on kids

[@hatimaliraqisongsandotheri5268]

Can you search by password? I mean the other way around. Thanks.

[@hessen3061]

can i see if a hacker is in my computer with programs that show all the devices that are in your network like who is on my wifi?

[@acethenumba1042]

@Null Byte thank you ive learned so much from your videos

[@seriealltracks2816]

Does it include the collection#1 troy hunt has talk about recently ?

[@sheilasolosthemcu]

Where do you get the BreachCompilation? I ran the command on Kali and it said it doesn’t exist

[@TextAnom6000hack_onInstagram]

The above name on the Channel possesses the fastest andstrongest in hacking and recovering skills. Just got mine fixed

[@mgazyani]

Been searching for a while now, wasnt able to find the breached database..can someone please help?

[@ivannunez2524]

Im after the same thing

[@KevenSauce]

How do you get the breach compilation downloaded on kali linux?

[@douglasmstewart]

Not sure why but pip3 always give problems in kali. Is the package not properly maintained?

[@soltiscd]

How would you just search a single email address?

[@TextAnom6000hack_onInstagram]

Finally I got solution through the above details his service is fast and effective thanks Anom6000hack for the good work.

[@pranjalgoel6015]

Awesome video @nullbyte!!! appreciate your work.........!!!!

[@alessandrosala5511]

I download today the git but now is different from your tutorial.......can you write down here the new installation?

[@garnery-tv8226]

I have a question if you’d respond itll be great, instead of kali Linux, would it be ok if I used parrot security

[@nathan-ql5vh]

what is the terminal he is usin. he never explains in his video he just goes to it

[@hq_beatrix2983]

hey man ik im no special from your other subscriber but do you think we can set up a video call and u walk me through how to pull ip and send attack to the ip please respond

[@redpilledpatriot6868]

The commands I used: cd Desktop, apt-get install nodejs, git clone github.com/khast3x/h8mail.git, cd h8mail, pip3 install -r requirements.txt. I got an error saying that "pip is configured with locations that require TLS/SSL" after executing that last command I listed. I also ran into an error after executing theHarvester -d theguardian.com -l 1000 -b pgp, it said "invalid source".

[@rumilol2989]

Null byte. Hey I was involved in the Wattpad breach and I’m really scared. I’ve changed passwords and deleted accounts. I just wanted to know if I can be hunted down? It’s been 4 months. Should I still be scared? Please reply soon. Thanks

[@amoyzegh]

Nope since you changed your passwords. If your old password is related to your secret questions than you should change it.

[@rumilol2989]

@@amoyzegh ok thanks so much. Can someone steal my identity with the info stolen?

[@amoyzegh]

@@rumilol2989 Nope since they don't have access to your accounts (because you changed the passwords)

[@rumilol2989]

@@amoyzegh I think they have my birthdate I’m not sure I think I put in a fake one tho I don’t actually remember and my full names

[@rumilol2989]

@@amoyzegh I deleted the email linked and made a new one and used a new one for all my social media’s. I’ve changed tho passwords too.

[@tubehelpr]

Any idea why a certain email address would return the error: Warning: Breach compilation list index out of range? All others work fine...

[@mgazyani]

Where did you get the database from??

[@muhammadhassnain7453]

Tell me too please

[@mustafakhan948]

Hi, for me it's not working. I am using windows 10. Should I install Bash Script UNIX for my system?

[@MartianMoon]

Immaculate tutorial, thank you!

[@joelrobert4539]

What does immaculate mean lol😂

[@acethenumba1042]

@@joelrobert4539 i dont know ......

[@andrearosati9931]

I LOVE your tutorials. thankyou kody.

[@fancywaifu9821]

With the new and updated h8mail were u install through pip3, h8mail doesn't work for me for some reason. Idk how to fix it

[@sleepsmoky8541]

Thanks for this tutorial btw i really like what you do and especially how you explain things, could you just make another video about how to use API's cuz I'm a little bit lost 😂

[@romannepal1653]

-lb/--local:'expected one argument ' error is making me mad. Please anyone help me with it. I have downloaded all the breach compilation file which is 45gb or so. I can give you link if you help me with this error

[@ramprashanth]

github.com/khast3x/h8mail Check out the new documentation... It is much simpler now.

[@eliddell1]

For those getting the query.sh file not found, you seem to not have downloaded the db and likely just a text file. I am having a different problem, where the file is giving me a permission denied error. Yes i tried changing the permissions, but nothing.. I am able to run the query.sh manually running "bash query.sh" but not "sh query.sh"

[@eliddell1]

ok so i kind of got passed the permissions problem by editing the h8mail.py script changing: procfd = subprocess.run([query_bin, t.email], stdout=subprocess.PIPE) to: procfd = subprocess.run([query_bin, t.email], executable='/bin/bash', stdout=subprocess.PIPE) but now i get a file not found for each email like so: /media/root/Locust/BreachCompilation/query.sh: [e-mail]: No such file or directory /media/root/Locust/BreachCompilation/query.sh: [e-mail]: No such file or directory /media/root/Locust/BreachCompilation/query.sh: [e-mail]: No such file or directory /media/root/Locust/BreachCompilation/query.sh: [e-mail]: No such file or directory /media/root/Locust/BreachCompilation/query.sh: [e-mail]: No such file or directory anyone seeing this?

[@NightfallChease]

Hey ^^. Do u know how i can install the magnet file from the DB folder without using some other programss like rtorrent or qbittorent or something like this bcs my rtorrent wont downlaod the file and I cant use the other bcs i use kali as a microsoft application (thx alot)

[@Monalexander799]

Did you ever get this fixed?@@eliddell1

[@tyjohnston5889]

@moneymon007 Just wait a little bit and surely your question will be answered lol.

[@jaikaarbhogal]

How do I fix the error where it says cannot contact HIBP with CF bypass

[@srikanth-pn3gh]

which device are you using??

[@ShivamKumar-ll2dj]

Which version of Kali Linux?

[@DishTVupdates]

How can I use the Breach compilation API, if I don't want to download that huge file

[@mgazyani]

Did you get it??

[@NetHacker100]

@@mgazyani Did you get it?

[@mgazyani]

R. Nope.

[@MrGFYne1337357]

i keep getting a query.sh error......... otherwise tool works without the -bc option

[@echelon5162]

I'm extremely late, but to fix the error: *Download the correct BreachCompilation File* (If you already have the correct file, skip this step) Download the file using the magnet link here raidforums.com/Thread-Breach-Compliation-you-know-the-one-Free This file is 44GB, so make sure you have the available disk space *Replace the **query.sh** file* Replace the query.sh text by opening it in a text editor and replacing it with this gist.github.com/nlitsme/6f138e72b328c28520d64d7e03f2d5f9 Hopefully, if all goes well, this should fix the error. Again, I'm late on this, but from my experience this is what caused the error.

[@AchonyeokwuSunny]

Can someone tell me if this really worked? And how much gigabyte do l need to download the file

[@user-lz8zv8rl6h]

11:45 PEople be keeping "SEX" as password BRUH

[@jKomwa02]

What’s the name of the laptop. Looking to upgrade mine

[@TalesGrimm]

Is this better than Cr3dOv3r?

[@worldlesscat4019]

which program is this

[@echelon5162]

If you are using Homebrew, these are the installation instructions I had to follow: *Installing pip3* pip.pypa.io/en/stable/installing/ *H8mail installation* brew install nodejs git clone github.com/khast3x/h8mail.git cd h8mail pip3 install -r requirements.txt python3 h8mail.py -h

[@mehul_deshwali_]

Do you have date breach link?.

[@mervynally459]

Congratulations excellent job Cody

[@jamesh3639]

Does this work on any distros or only kali?

[@7kclouds319]

Kali is based on Ubuntu, so yes.

[@jamesh3639]

@@7kclouds319 What about Arch?

[@7kclouds319]

@@jamesh3639 That might work if you have Python3 installed. As well as pip.

[@dracodayss6566]

yo where is the breach compilation u found

[@AnimeVeldora]

Could not fetch URL pypi.org/simple/h8mail/: There was a problem confirming the ssl certificate: HTTPSConnectionPool(host='pypi.org', port=443): Max retries exceeded with url: /simple/h8mail/ (Caused by SSLError("Can't connect to HTTPS URL because the SSL module is not available.")) - skipping ERROR: Could not find a version that satisfies the requirement h8mail (from versions: none) ERROR: No matching distribution found for h8mail

[@rozer4660]

Does it work on windows ?

[@bufordmaddogtannen]

Has the list really been cleaned up or does it still contain 50%+ duplicates as it is usually the case?

[@NullByteWHT]

It's been cleaned and organized

[@NightfallChease]

Hey maybe you could help me... Iam using Kali-Linux as a Microsoft application on my Win10 Computer. I got 2 RaspberryPi's but my Pc is much faster than the Raspberry Pi's (so iam using it). Do u know how i can download the BrachCompalation without some rTorrent or qBittorrent? Is there a nother way or a better torrent/magnet installer?

[@muhammadhassnain7453]

First of all tell me please from where did you downloaded the breach compilation torrent

[@donjames5761]

can i use ubuntu for this or does it have to be keli ?

[@NullByteWHT]

Ubuntu should work.

[@SinanAkkoyun]

Why do you live show the passwords of these journalists? Are they a fake result?

[@uditbhadauria6777]

Bruh...! You are just awesome. Respect++ Your content is just truly magnificent everytime..

[@officialhumanityparty9483]

Great now I can make a brute force list with this too for hydra

[@PulGoyGoy]

Keep up the great work, your works are awesome.

[@TextAnom6000hack_onInstagram]

The above name on the Channel possesses the fastest andstrongest in hacking and recovering skills. Just got mine fixed

[@j_owatson]

could someone link me the breach compilation

[@adammagdy2795]

can you use a wordlist instead of the breach Compilation???

[@tyjohnston5889]

4yrs later....yes

[@mouthfulacoque3580]

Does that count as a blink?

[@Elias-qn2rg]

wdym blink?

[@LoLOfIron]

How download that breache ??

[@sleepydj4704]

do I use in cmd or powershell

[@Oef200862nd]

Need to use Linux Kali is the best dis for this.....

[@desiredditor]

buddy where is the breached file that i can download

[@blakerowland5562]

Your kidding right

[@rainerzufall4268]

Thank you very much for your content.

[@TextAnom6000hack_onInstagram]

The above name on the Channel possesses the fastest andstrongest in hacking and recovering skills. Just got mine fixed

[@Morpheus776]

can you make a video about TempleOS? or give your opinion on it?

[@lililol7694]

hey I just want to knew if its still working

[@ramprashanth]

Yes!

[@frostyboi6989]

How do you run Linux kali in Windsose 10 pls answer

[@mihaiioc.3809]

virtual machine

[@AK-cm7uf]

Dual boot!

[@skunkhead2007]

pip 3 ? not 'pip' alone :-) thanks very much ...

[@skunkhead2007]

not working on parrot sec

[@PSNCopy]

* not working on YOUR parrot sec

[@skunkhead2007]

no it aint, i have no idea as to why,im a noob so simple answers,please :-) but every thing else i have used works or i have got to work with parrot @@PSNCopy

[@whatiknowis]

were can i install the breach Compilation

[@mgazyani]

Did you get it??

[@scottg5728]

Ye did you get it?

[@matteobarsanti8139]

I think you leaked my leak hahahaha

[@kyuk3tsuk12]

im still amazed that its FOURTY FOUR GIGS OMG

[@rozer4660]

Why tf there is no youtube recommandation

[@lancelotwilliams1112]

no such file or directory....pip3 install -r requirements.txt

[@NullByteWHT]

just run pip3 install h8mail You can find the docs here if you have any other issues. github.com/khast3x/h8mail

[@muhammadhassnain7453]

Mine worked with python -m pip install h8mail

[@muhammadhassnain7453]

I've also installed it on my android phone.

[@Dave-kq7gv]

top shelf content, good Sir

[@abhishekpcc2637]

How did you manage to use an external hard drive, in order to save to local space?

[@tyjohnston5889]

On Kali Pi anyway I used: Inserted external USB Right clicked Icon Permissions Permanently mounted with access Added the path to downloads ie: #~/media/usb/password_download at the end

[@geoqallen1871]

Not all heros wear capes guys.

[@NullByteWHT]

Haha 🤓

[@rhinofart89]

pgp is invalid source for me.

[@muhammadhassnain7453]

Actually it's not setup on. Your system

[@maxbart1353]

hi, would someone give me an old github account thats not used for free?

[@ProdAvez-vx6cj]

pretty sure GitHub is free

[@rshrewd8809]

what if youtube ban this channel ? is every video gonna be gone from the public ?

[@laughingman2531]

they can't its a prober company they do it's its a law suite

[@SwapnilSingh4u]

He has maintained the policy guidelines so it will not happen but we can't say for sure what they can change in their policy guidelines.

[@laughingman2531]

+D Hacker ya ture

[@ereal2]

Niiice content keep em coming love took you find more , more ,MORE! Please

[@thehound3961]

# 8......keep them coming......

[@ucanhnguyen7167]

you're the best

[@8989youu]

Dude, you are awesome!

[@adamarzo559]

And why aren't we fining companies who store password/credit cards/address info in plain text millions of dollars? Who gives a flying fuck if they go bankrupt. The user is more important than a company staying in business.

[@bagasperdana007]

I,m from Indonesian

[@deathxe5]

Anyone find a fix for query.sh not being a file? Searched for hours *edit figured it out, im an idiot

[@bkkishore]

I'm getting the query.sh error....how did you fix it?

[@deathxe5]

Kishore Boddula the real download is a torrent which contains the query script.

[@deathxe5]

magnet:?xt=urn:btih:7ffbcd8cee06aba2ce6561688cf68ce2addca0a3&dn=BreachCompilation&tr=udp%3A%2F%2Ftracker.openbittorrent.com%3A80&tr=udp%3A%2F%2Ftracker.leechers-paradise.org%3A6969&tr=udp%3A%2F%2Ftracker.coppersurfer.tk%3A6969&tr=udp%3A%2F%2Fglotorrents.pw%3A6969&tr=udp%3A%2F%2Ftracker.opentrackr.org%3A1337

[@deathxe5]

Ben responsibility has no place here. I think you mean maturity and knowledge. If someone can’t figure it out it doesn’t mean they will use it irresponsibly. Doesn’t make sense logically. And it’s publicly available, we’re not treading on any moral grounds.

[@deathxe5]

Ben always share, that’s the power of the internet/communities, happy hunting ;)

[@VincentOldMark]

[!] Invalid source

[@BamaDega]

Nice info bro!

[@frostyboi6989]

How do you do this on windows

[@BWebb]

you don't