BreachHunter v2.0.0

BreachHunter is a Bash utility that automates data-breach lookups using the Dehashed API.
It extracts and organizes breach data into easily consumable files and can display full, untruncated results in verbose mode.

Features

• Search by: email, username, name, password, ip, phone, address, vin, license plate, cryptocurrency address, hashed password, domain.
• Domain searches return broader results (costs more credits).
• Free password-hash lookup that does not consume API credits.
• Saves results into structured output directories (emails.txt, passwords.txt, ...).
• Generates a searchable raw_response.json and a search_summary.txt.
• Verbose mode shows all breach entries with no truncation.

Requirements

Install on Debian/Ubuntu:

sudo apt update && sudo apt install -y curl jq

Installation

git clone https://github.com/4m3rr0r/BreachHunter.git
cd BreachHunter
chmod +x BreachHunter.sh

Open the script and set your API key:

API_KEY="your_dehashed_api_key_here"

Usage

./BreachHunter.sh [-v] OPTION VALUE [OUTPUT_DIR]

Common options

Basic searches (1 credit)

• -e, --email — Search by email address
• -n, --name — Search by full name
• -u, --username — Search by username
• -p, --password — Search by plaintext password
• -ip, --ip-address — Search by IP address
• -tel, --phone — Search by phone number
• -a, --address — Search by physical address

Advanced searches (1 credit)

• -vin, --vin — Vehicle Identification Number
• -lp, --license-plate — License plate
• -crypto, --crypto-addr — Cryptocurrency address
• -H, --hashed-pwd — Hashed password

Domain search (2 credits)

• -d, --domain — Search by domain (returns related results)

Free searches (0 credits)

• -ph, --password-hash — Check if a password hash is in breach data (free)

Other

• -s, --status — Check API credits / status
• -v, --verbose — Show full results in terminal (no truncation)
• -h, --help — Show help menu
• -V, --version — Show version info

Examples

Verbose email search (shows all results + saves files):

./BreachHunter.sh -v -e target@example.com

Domain search:

./BreachHunter.sh -d example.com

Free password-hash check:

./BreachHunter.sh -ph 5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8

VIN search:

./BreachHunter.sh -vin 1HGCM82633A123456

Output

Search results are saved to a timestamped output directory, for example:

breach_results/email_target_20250926_153000/
├─ raw_response.json
├─ search_summary.txt
├─ emails.txt
├─ passwords.txt
├─ names.txt
├─ usernames.txt
├─ ip_addresses.txt
├─ phones.txt
├─ addresses.txt
├─ vins.txt
├─ license_plates.txt
├─ cryptocurrency_addresses.txt
├─ hashed_passwords.txt
└─ sources.txt

search_summary.txt contains a short summary with counts for each extracted file.

BreachHunter

BreachHunter is a powerful OSINT (Open Source Intelligence) tool designed for cybersecurity professionals, investigators, and ethical hackers to efficiently search for leaked data using the DeHashed API.

Features

• Comprehensive Search Capabilities: BreachHunter allows users to search for leaked data using various criteria such as email addresses, passwords, names, usernames, IP addresses, hashed passwords, hash types, VINs, addresses, and phone numbers.
• Rich Data Retrieval: Retrieve detailed information associated with the queried data, including IP addresses, usernames, names, email addresses, hashed passwords, hash types, passwords, phone numbers, VINs, and addresses.
• Efficient Output Management: BreachHunter outputs search results to separate files for easy organization and analysis, enhancing workflow efficiency.
• Error Handling: The script includes robust error handling mechanisms to validate API key and email credentials, ensuring smooth operation and preventing unauthorized access.

Prerequisites

Before using BreachHunter, ensure you have:

• DeHashed API Key: Sign up for a DeHashed account and obtain a valid API key.
• Registered Email: Use a registered email associated with your DeHashed account.

Installation

1. Clone the repository:

   git clone https://github.com/4m3rr0r/BreachHunter.git

2. Navigate to the project directory:

   cd BreachHunter

3. Make the script executable:

   chmod +x BreachHunter.sh

4. Usage

   ./BreachHunter.sh -h

   Options
   -h or --help: Display the help menu.
   -v or --version: Show the program's version number and exit.
   -e or --email: Specify the email.
   -p or --password: Specify the password.
   -n or --name: Specify the name.
   -u or --username: Specify the username.
   -ip or --ip_address: Specify the IP address.
   -H or --hashed_password: Specify the hashed password.
   -ha or -Ha or --hash_type: Specify the hash type.
   -vi or -VI or --vin: Specify the VIN.
   -a or -A or --address: Specify the address.
   -ph or -PH or --phone: Specify the phone number.

Examples
Search for data associated with an email:

./BreachHunter.sh -e demo@example.com -f output_directory

Search for data associated with a hashed password:

./BreachHunter.sh -H <hashed_password> -f output_directory

License
This project is licensed under the MIT License - see the LICENSE file for details.