We've built Lunar, a free platform that lets organizations check whether credentials or related assets tied to their domain appear in breaches or infostealer logs.
The idea is simple: if data connected to your organization is already circulating in breach datasets or stealer logs, you should be able to see that without paywalls or sales cycles.
How it works at a high level:
Domain-based access (no individual lookups)
Exposure from infostealer logs, breach dumps, combo lists, and leaked cookies or sessions
Continuous monitoring of underground sources, with near real-time updates
Data is masked until domain ownership is verified
Access to the exposure data itself is free. There are optional advanced features for teams that need automation, integrations, or deeper operational workflows, but basic visibility into your own exposure is not gated.
I'm affiliated with the project (I lead the team behind it). Posting here because I’d genuinely appreciate feedback from people who think about breach data, infostealers, and responsible disclosure. Happy to answer questions or hear criticism.
I've created a set of simple, free online tools designed to help developers with quick tasks, whether it's converting epoch time, counting text length, generating random data, and more.
If you have feedback or ideas for new tools or features, I’d love to hear them!
The script is intended to be a copy/paste script, with no imports and just "Fill in the blanks" parameters. There A LOT of other options that are much better, but require more setup:
http://scrapy.org/https://pypi.python.org/pypi/spider.py
We've built Lunar, a free platform that lets organizations check whether credentials or related assets tied to their domain appear in breaches or infostealer logs.
The idea is simple: if data connected to your organization is already circulating in breach datasets or stealer logs, you should be able to see that without paywalls or sales cycles.
How it works at a high level:
Domain-based access (no individual lookups)
Exposure from infostealer logs, breach dumps, combo lists, and leaked cookies or sessions
Continuous monitoring of underground sources, with near real-time updates
Data is masked until domain ownership is verified
Access to the exposure data itself is free. There are optional advanced features for teams that need automation, integrations, or deeper operational workflows, but basic visibility into your own exposure is not gated.
I'm affiliated with the project (I lead the team behind it). Posting here because I’d genuinely appreciate feedback from people who think about breach data, infostealers, and responsible disclosure. Happy to answer questions or hear criticism.