searchpass 1.0.5

Default passwords search tool supporting many open source databases

SearchPass

Get default passwords for network devices by vendor.

This tool is similar to the Ruby implementation SearchPass for offline searching of default credentials for network devices, web applications and more. The present tool expands its capabilities to more databases of credentials and allows to update the local database, a bit like SearchSploit allows to update references to exploits on your local machine.

It relies on pybots for abstracting robots that download from the sources of default credentials and on dictquery for querying the underlying data using the --query option.

$ pip install searchpass
[...]

$ searchpass --help
[...]
This tool aims to search for default passwords of common devices based on criteria like the vendor or the model.
It works by caching the whole lists of known default passwords downloaded from various sources (relying on pybots ;
 including CIRTnet, DataRecovery, PasswordDB, RouterPasswd or even SaynamWeb) to perform searches locally.

usage: searchpass [-e] [--passwords] [-q QUERY] [--usernames] [--update] [-h] [--help] [-v]

optional arguments:
  -e, --empty           include empty username or password (default: False)
  --passwords           get passwords only (default: False)
  -q QUERY, --query QUERY
                        search query (default: None)
  --usernames           get usernames only (default: False)

extra arguments:
  --update       update passwords databases
  -h             show usage message and exit
  --help         show this help message and exit
  -v, --verbose  verbose mode (default: False)

Usage examples:
  searchpass --update
  searchpass --passwords
  searchpass --query "username=='user'" --passwords