A tool that automatically tries stolen usernames and passwords on target sites and separates out those that are still valid.
Most credentials in log dumps are old or have been changed. A checker finds the working ones by making thousands of login attempts against a specific site; it is this result that sets the sale price. OWASP
Checkers are the tools of credential stuffing attacks: they try to bypass rate limits with proxy lists and browser emulation. MITRE ATT&CK
Username and password lines extracted from logs are fed to the tool.
Each line is sent to the target site’s login page from different IP addresses. OWASP
Valid, invalid and extra-verification accounts are written to separate files.
We use cookies to ensure proper operation of our website, analyze usage, and deliver relevant content and advertisements. You can manage your preferences at any time. Cookie Policy