Query Passwords for a Domain

Takes a domain (e.g. enzoic.com) and returns a list of emails and recovered passwords for any email address we've found credentials for in that domain.

---

Query all cleartext passwords for a users in a given email domain.

get

Returns a paginated list of credentials in the Enzoic database for all users under a given email domain. This variant of the call takes a domain (e.g. enzoic.com) and returns a list of emails and recovered passwords for any email address we've found credentials for in that domain.

Authorizations

enzoic_auth

AuthorizationstringRequired

The Enzoic API uses a basic auth scheme where the username is your API key and the password is your API secret.
See https://docs.enzoic.com/enzoic-api-developer-documentation/using-the-enzoic-api#api-authentication for more details.

Query parameters

domainstringRequired

The email domain to pull credentials for

Example: enzoic.com

pageSizeintegerOptional

(Optional) The number of results to return in a single call. The default page size is 100 and the maximum is 500.

Default: 100Example: 500

pagingTokenstringOptional

(Optional) For each call to the API, if there are additional pages of results available then a pagingToken will be returned. Pass the pagingToken in via this parameter to retrieve the subsequent page of results. Should be left off for the initial call to the API.

Example: 598e5b844eb6d82ea07c5783

Responses

200

The call was successful and all matching credentials are in the response

application/json

countintegerOptional

The total number of users exposed for the requested domain. If this exceeds the requested page size, the results are paginated and a pagingToken will be present in the response.

Example: 1

pagingTokenstringOptional

Present when there are additional pages of results available. Pass this token in on a subsequent call to fetch the next page of results.

Example: 598e5b844eb6d82ea07c5783

get

/cleartext-credentials-by-domain

HTTPcURLJavaScriptPython

GET /v1/cleartext-credentials-by-domain?domain=text HTTP/1.1
Host: api.enzoic.com
Authorization: Basic username:password
Accept: */*

200

The call was successful and all matching credentials are in the response

{
  "count": 1,
  "pagingToken": "598e5b844eb6d82ea07c5783",
  "users": [
    {
      "username": "[email protected]",
      "passwords": [
        {
          "password": "password123",
          "hashType": 0,
          "salt": "text",
          "exposures": [
            {
              "id": "57dc11964d6db21300991b78",
              "title": "funsurveys.net",
              "entries": 5123,
              "date": "2015-05-01T00:00:00.000Z",
              "category": "Manufacturing",
              "source": "Cybercrime Forums",
              "passwordType": "Cleartext",
              "exposedData": [
                "Emails",
                "Passwords"
              ],
              "dateAdded": "2016-09-16T15:36:54.000Z",
              "sourceURLs": [
                "https://www.someplace.com"
              ],
              "domainsAffected": 683,
              "sourceFileCount": 1
            }
          ]
        }
      ]
    }
  ]
}