Oblivion is a tool focused in real time monitoring of new data leaks, notifying if the credentials of the user has been leak out. It's possible too verify if any credential of user has been leak out before. The Oblivion have two modes:
- Oblivion Client: graphical mode.
- Oblivion Server: mode with API functionalities.
NOTE: The Oblivion Client and the Oblivion Server are independents.
- 💪 CVEs scan
- ☑️ Works with powerful APIs
- 🔗 Works too with Google Dorks
- 🔎 Checks your password in Word Lists
- 👀 Checks the last pastes in Pastebin
- 📄 Output to txt, docx, pdf, xlsx, json, html, xml, db
- 🔒 Output to encrypted files
- 📦 Sends result files to multiples Buckets S3
- 📁 Upload the result files to Google Drive
- 📡 Cab send result files by SSH (work with EC2)
- 📢 Notify by Telegram and e-mail
- 📌 Includes option to hide passwords for demonstrations
- 🕒 Works with scheduled scans
- 🔁 Possible to execute loop scans
| Service | Functions | Status |
|---|---|---|
| HaveIBeenPwned | E-mails and passwords | paid |
| Scylla.sh | Cleartext passwords, hashs and salts, usernames, IPs, domain | free |
| IntelX.io | Cleartext passwords, hashs and salts, usernames, IPs, domain, Bitcoin Wallets, IBAN | paid |
| Circl.lu | Checks for new CVEs | free |
For configuration or usage of Oblivion please read the documentation. All the steps were careful explained with images and examples.
1 - If you want only to use the free Oblivion (without the paid API keys) make sure that the free APIs are working. Some times the free API of the Scylla.sh can be in manutence, and the Oblivion will return an error when you try to call the Scylla.sh API.
2 - Make sure that you are using the indicated OS and Python version. Some OS can be not compatible or return some types of error when you try to use Oblivion, for more information about compatibilities please read the Oblivion documentation.
-
Peter Kleissner and the Intelligence X team
-
Alejandro Caceres (Scylla)
-
Gustavo Melgaço
-
Eliabe Kaique