Sploitus XposedOrNot Tool Exposes 850 Million Compromised Passwords
Article Content
- •XposedOrNot aggregates 850 million compromised passwords from various breaches.
- •Passwords are hashed with SHA-3 (Keccak-512) for secure verification.
- •The tool provides JSON output for user-friendly data analysis.
The XposedOrNot (XoN) tool has been launched to help users check if their passwords have been compromised. It aggregates around 850 million real passwords from various data breaches, including Collection #1 and Yahoo. The tool hashes passwords using SHA-3 (Keccak-512) to ensure security during checks. Users can verify their passwords anonymously, with results provided in JSON format, which includes password characteristics and breach counts. This initiative aims to enhance personal account security by allowing users to identify compromised credentials. The platform also emphasizes the importance of using strong passwords to mitigate risks associated with data leaks.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track REvil and Coop in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Iranian State Actors Deploy CHOSEN BRICK Spyware Against Dissidents On September 15, 2026, the UK, US, and Netherlands issued a joint advisory regarding a spyware campaign attributed to Iranian state actors targeting dissidents, activists, and journalists. The malware, known as CHOSEN BRICK, is delivered through spear-phishing attacks on messaging platforms like WhatsApp and Telegram.… 
Qilin Ransomware Targets Retelit, Major Telecom Provider in Italy The Qilin ransomware group has reportedly targeted Retelit SpA, a leading telecommunications operator in Italy. This attack is part of a broader campaign that has seen a significant increase in ransomware incidents attributed to Qilin since the start of 2026. The group exploits known vulnerabilities, particularly in…