joelgmsec / leaksearch Goto Github PK

Hey, thanks for providing this tool and service.
However, I have the following issues.

Number parameter not working as intended

Despite having set the N parameter, the tool just prints the first 20 records (note that 1914 records were found)

EDIT: Looking into the code it seems that the number parameter is only used for truncating the output and that the API has a hardcoded limit of 20 records. This means that whenever there are more than 20 records, you only will be able to fetch the first 20 records. Anything beyond is not accessible at all - except there is something like an undocumented offset parameter?

False-positive records

It seems that it is not possible to search for specific domains or full entries.
Example: searching for "[email protected]" results in 10.000 entries which do also contain other stuff.

Also I noticed, that anything which contains a minus will result in false-positive records.
Example: Trying to get a list for the domain "@fake-box.com" gives me 10.000 records, which contain "fake-box.com" or either "fake" or "box".

It would be convenient to add requests to the requirements.txt, it is necessary to start the application and if the system is clean and does not have it installed it will give an error.

Otherwise, great work, thank you very much.

https://github.com/JoelGMSec/LeakSearch
cd LeakSearch
pip3 install -r requirements.txt