Collection #1
Collection #1, examined by Troy Hunt, consisted of more than 12,000 files and over 87 GB of data, containing about 2.7 billion username and password pairs usable for credential stuffing. Troy Hunt
A list of username or email and password pairs, mostly used in credential stuffing attacks.
Troy Hunt explains a “combo” as a combination of usernames (usually email addresses) and passwords; these lists are tried against other services with automated tools. Troy Hunt
According to OWASP, credential stuffing is trying breached username and password pairs on other sites; it works because users reuse the same password. OWASP
Username and password pairs are extracted from breaches, phishing and infostealer logs. OWASP
Pairs are combined by topic or service. Troy Hunt
Automated tools try the list on many sites. MITRE ATT&CK
Collection #1, examined by Troy Hunt, consisted of more than 12,000 files and over 87 GB of data, containing about 2.7 billion username and password pairs usable for credential stuffing. Troy Hunt
The ALIEN TXTBASE logs added to Have I Been Pwned contained 23 billion rows and 493 million unique website and email pairs, affecting 284 million unique email addresses. Troy Hunt
We use cookies to ensure proper operation of our website, analyze usage, and deliver relevant content and advertisements. You can manage your preferences at any time. Cookie Policy