4 ms·

Nice work! At a glance, the email you sent out does look sort of spammy. If you plan on doing it again you might get better feedback by making it a bit more hum

Nice work! At a glance, the email you sent out does look sort of spammy. If you plan on doing it again you might get better feedback by making it a bit more human - ie "I'm just a guy/gal trying to help yall out - hope you don't use this password everywhere because someone posted it to pastebin.... - have a good one!" or something like that. Out of curiosity - what did you use to scrape pastebin?

julianj 11y ago
That's a good idea. I will give that a shot. To scrape pastebin I used a mutated version of a python script by Xavier Garcia. The only change I made was to save a copy of the paste. The version I adapted is located here: http://www.shellguardians.com/2011/07/monitoring-pastebin-leaks.html http://www.shellguardians.com/2011/07/monitoring-pastebin-le...
jwcrux 11y ago
I created a Twitter bot called @dumpmon (recently suspended for no apparent reason) that scraped paste sites looking for password dumps and tweeting if one was found. You can find the code here: http://github.com/jordan-wright/dumpmon http://github.com/jordan-wright/dumpmon. Here are some stats if anyone is interested in what it collected over approx. 2 years: http://jordan-wright.com/blog/2015/05/26/two-years-of-at-dumpmon/ http://jordan-wright.com/blog/2015/05/26/two-years-of-at-dum...
- shayanjm 11y ago
  I remember chatting with you a while back as I was also working on a pastebin scraping project. http://github.com/shayanjm/pasteye http://github.com/shayanjm/pasteye Glad to see dumpmon is still going strong :)
  - jwcrux 11y ago
    It is... just not on Twitter anymore. The account was suspended about a week or two ago and I haven't heard anything back on my appeal from Twitter.
shayanjm 11y ago
Shameless self-plug - I built a "pastebin scraper as a service" platform, and released it here: https://github.com/shayanjm/pasteye https://github.com/shayanjm/pasteye Took much inspiration from dumpmon, but distributed it so users can choose their own sensitivity settings.

julianj 11y ago

That's a good idea. I will give that a shot. To scrape pastebin I used a mutated version of a python script by Xavier Garcia. The only change I made was to save a copy of the paste. The version I adapted is located here: http://www.shellguardians.com/2011/07/monitoring-pastebin-leaks.html http://www.shellguardians.com/2011/07/monitoring-pastebin-le...

jwcrux 11y ago

I created a Twitter bot called @dumpmon (recently suspended for no apparent reason) that scraped paste sites looking for password dumps and tweeting if one was found. You can find the code here: http://github.com/jordan-wright/dumpmon http://github.com/jordan-wright/dumpmon. Here are some stats if anyone is interested in what it collected over approx. 2 years: http://jordan-wright.com/blog/2015/05/26/two-years-of-at-dumpmon/ http://jordan-wright.com/blog/2015/05/26/two-years-of-at-dum...

shayanjm 11y ago
I remember chatting with you a while back as I was also working on a pastebin scraping project. http://github.com/shayanjm/pasteye http://github.com/shayanjm/pasteye Glad to see dumpmon is still going strong :)
- jwcrux 11y ago
  It is... just not on Twitter anymore. The account was suspended about a week or two ago and I haven't heard anything back on my appeal from Twitter.

shayanjm 11y ago

Shameless self-plug - I built a "pastebin scraper as a service" platform, and released it here: https://github.com/shayanjm/pasteye https://github.com/shayanjm/pasteye Took much inspiration from dumpmon, but distributed it so users can choose their own sensitivity settings.