██████╗ ██████╗ ███████╗ █████╗  ██████╗██╗  ██╗███████╗██████╗
██╔══██╗██╔══██╗██╔════╝██╔══██╗██╔════╝██║  ██║██╔════╝██╔══██╗
██████╔╝██████╔╝█████╗  ███████║██║     ███████║█████╗  ██████╔╝
██╔══██╗██╔══██╗██╔══╝  ██╔══██║██║     ██╔══██║██╔══╝  ██╔══██╗
██████╔╝██║  ██║███████╗██║  ██║╚██████╗██║  ██║███████╗██║  ██║
╚═════╝ ╚═╝  ╚═╝╚══════╝╚═╝  ╚═╝ ╚═════╝╚═╝  ╚═╝╚══════╝╚═╝  ╚═╝
-----------------------------------------------------------------
Breach data lookup tool using BreachDirectory API
Author: Kristian Daae-Johansen (IamPhasm)
-----------------------------------------------------------------

Breacher is a command-line tool for looking up breached credentials using the BreachDirectory API on RapidAPI. It automatically attempts to crack SHA-1 hashes using weakpass.com for each result.

---

Features

• Email / username lookup — find all breached passwords and sources tied to an email or username
• Password lookup — check how many times a given password has been leaked
• Source lookup — list all breach sources for an email or username
• Domain lookup — find all breached credentials for a domain (requires Ultra plan)
• Hash dehash — attempt to decrypt a given hash via BreachDirectory
• Auto hash cracking — for every SHA-1 hash in results, automatically queries weakpass.com to retrieve the plaintext password
• File output — save results to a file with -w

---

Dependencies

Install required Python package:

pip install requests

Python 3.7+ required.

---

Setup

1. Get a free API key from RapidAPI — BreachDirectory

2. Add your key to breacher-api.config (create from the example):

cp breacher-api.config.example breacher-api.config

Edit breacher-api.config:

breachdirectory=YOUR_API_KEY_HERE

---

Usage

python breacher.py -u <email / password> [-f <function>] [-w <output file>]

Function	Command
Check Email	python breacher.py -u <email>
Check Password	python breacher.py -u <password> -f password
Check breaches/sources	python breacher.py -u <email or password> -f sources
Check Domain (Ultra plan)	python breacher.py -u <yourdomain.com> -f domain
Write results to file	python breacher.py -u <email> -w results.txt
Show help	python breacher.py -h
Show version	python breacher.py --version

Examples

# Look up an email (default: auto function)
python breacher.py -u example@email.com

# Check how many times a password was leaked
python breacher.py -u "password123" -f password

# Look up breach sources for an email
python breacher.py -u example@email.com -f sources

# Look up a domain and save results to file
python breacher.py -u example.com -f domain -w results.txt

Example output

[*] Querying BreachDirectory API for: example@email.com
[*] Loading results: 3 for example@email.com
-----------------------------------------------------------------

#1 - Source: MyHeritage.com
-------------------------------------
Password   : sdfsdf (cracked)
SHA-1 HASH : 185bc6e94635ed4bd35423221b7f451a87e8c8d6

#2 - Source: Canva.com
-------------------------------------
Password   : hunter2 (cracked)
SHA-1 HASH : f3bbbd66a63d4bf1747940578ec3d0103530e21d

---

API Plans

Feature	Free	Ultra
Email lookup	✅	✅
Password check	✅	✅
Source lookup	✅	✅
Domain lookup	❌	✅

Get your API key: rapidapi.com/rohan-patra/api/breachdirectory