Only One target in textfile is used for Compromised password and not the others

Fabinout commented 1 year ago

Issues not respecting the issue template will be closed without being read, thank you.

Checkbox

[X] I have thoroughly checked the answer is not in the wiki.

Env

h8mail version: 2.5.6
Python version: 2.7.10
Operating System: Mac OS 10.12.6

Description

When I'm targeting one username, it works and find breaches

$ h8mail -t fabien.lamarque -q username -bc . -sk

        Session Recap:  

             Target                  |                   Status

        fabien.lamarque              |          Breach Found (2 elements)

When I'm targeting one random unused username, it works as expected (no breach)

$ h8mail -t foobar.randomlastname -q username -bc . -sk

-> Not compromised

What I Did

When I merged both targets in a text file called merged.txt and ran this command

$ h8mail -t merged.txt -q username -bc . -sk

One time he looks for breach for user fabien.lamarque and find breaches correctly

  CompilationOfManyBreaches h8mail  -t merged.txt -q username -bc .  -sk  

          Official h8mail posts: 
          https://khast3x.club/tags/h8mail/

      Version 2.5.6 - "ROCKSMASSON.6"  

    ._____. ._____.     ;____________;
    | ._. | | ._. |     ;   h8mail   ;
    | !_| |_|_|_! |     ;------------;
    !___| |_______!  Heartfelt Email OSINT
    .___|_|_| |___.    Use responsibly
    | ._____| |_. | ;____________________;
    | !_! | | !_! | ; github.com/khast3x ;
    !_____! !_____! ;--------------------;

[>] h8mail is up to date
[~] Reading from file merged.txt
[~] Parsing emails frommerged.txt
[~] Removing duplicates
[>] Targets:
[>] fabien.lamarque
[>] foobar.randomlastname
[~] Target factory started for fabien.lamarque
[~] Target factory started for foobar.randomlastname
[~] Worker [22096] is searching for targets in ./data/f/a/b (87 MB)
[>] Found occurrence [./data/f/a/b] Line 860119: fabien.lamarque@gmail.com:la****
[>] Found occurrence [./data/f/a/b] Line 860120: fabien.lamarque@gmail.com:wa*****
[~] Terminating worker pool
[~] Worker [22105] is searching for targets in ./data/f/a/f (6 MB)
[~] Terminating worker pool
[~] Removing fabien.lamarque@gmail.com:la***** (cleaning function)
[~] Removing fabien.lamarque@gmail.com:wa***** (cleaning function)

 __________________________________________________________________________________________

[>] Showing results for fabien.lamarque

 __________________________________________________________________________________________

[>] Showing results for foobar.randomlastname
__________________________________________________________________________________________

                                   Session Recap:  

                 Target                  |                   Status                  
__________________________________________________________________________________________

            fabien.lamarque              |          Breach Found (2 elements)         
__________________________________________________________________________________________

         foobar.randomlastname           |               Not Compromised              
__________________________________________________________________________________________

Execution time (seconds):   6.243665933609009

the other time, he only uses the second target, and find nothing

  CompilationOfManyBreaches h8mail  -t merged.txt -q username -bc .  -sk

          Official h8mail posts: 
          https://khast3x.club/tags/h8mail/

      Version 2.5.6 - "ROCKSMASSON.6"  

    ._____. ._____.     ;____________;
    | ._. | | ._. |     ;   h8mail   ;
    | !_| |_|_|_! |     ;------------;
    !___| |_______!  Heartfelt Email OSINT
    .___|_|_| |___.    Use responsibly
    | ._____| |_. | ;____________________;
    | !_! | | !_! | ; github.com/khast3x ;
    !_____! !_____! ;--------------------;

[>] h8mail is up to date
[~] Reading from file merged.txt
[~] Parsing emails frommerged.txt
[~] Removing duplicates
[>] Targets:
[>] foobar.randomlastname
[>] fabien.lamarque
[~] Target factory started for foobar.randomlastname
[~] Target factory started for fabien.lamarque
[~] Worker [22126] is searching for targets in ./data/f/o (229 MB)
[~] Terminating worker pool
[~] Worker [22134] is searching for targets in ./data/f/f (32 MB)
[~] Terminating worker pool

 __________________________________________________________________________________________

[>] Showing results for foobar.randomlastname

 __________________________________________________________________________________________

[>] Showing results for fabien.lamarque
__________________________________________________________________________________________

                                   Session Recap:  

                 Target                  |                   Status                  
__________________________________________________________________________________________

         foobar.randomlastname           |               Not Compromised              
__________________________________________________________________________________________

            fabien.lamarque              |               Not Compromised              
__________________________________________________________________________________________

Execution time (seconds):   17.49519371986389

This is a simple test, but my real-case merged text file is bigger and h8mail only look for 1 username breach.

cyb3rw0lf commented 1 year ago

same issue

cyb3rw0lf commented 1 year ago

The problem is the breachcomp_path variable is not reset after first iteration and from second target the search is broken. I sent pull request #165

khast3x / h8mail