In this video, we're taking a look at the website D hashed and it can be found at HTTPS calling forward
slash forward slash D hash dot com.
Now what D hashed is is its website is comprised of various data breaches and they allow you to actually
search these data breaches.
Now, it's a it's a freemium service and I call it a premium service because there's different tiers.
You could create an account for free and you can browse and take a look at you, put in email addresses.
You can put names, passwords, pretty much anything into the search engine.
And you can take a look and see if there's some issue with the data breach.
Now, if you're on a free service, it'll tell you that it's part of X, Y or Z data breach.
If it is part of a data breach.
But you won't be able to get much more information than that.
In order to see that information, you're going to have to pay for to be able to see it.
And we'll take a look at that in a minute.
Now, if you click on the breach list, we could take a look at the various data breaches that is part
of D Hashed is you can see here there is quite a bit of data breaches here and we can see how new the
data breaches and how many people affected in the site.
Up here we can see there's almost 6000 searchable databases, 1 million plus total pays, 30,000 plus
websites, hacked daily, etc..
In if we go down to upgrade.
I'm currently logged in and I do have a paid account for right now.
We can see that free.
Let you monitor your accounts and limit searches, but the results are censored.
Now, if you want to, if you're doing an ocean investigation and you find something and you don't want
to really pay a lot into it, you could pay 399 currently you get some days access, full access, unlimited
searches within that time.
So there should be plenty of time if you if you actually come across someone or something.
And if we keep going down here, looks like it's 1130 a month or 120 999 for 12 months, etc..
So we're going to go ahead and we're going to go search a account.
And this is one of my friends account and we talked to them and I got the go ahead to go ahead and use
it because here he changed his password.
Now, the important thing you want to do, if you're putting a name, address, a phone number or email
address or what have you put it in quotes.
So I have, quote, Mustang 169 at Hotmail AKAM, end quote.
Now, the reason why you want to put quotes in is if you don't put quotes in.
If I punches in, it may potentially it'll probably come up with a bunch of Hotmail addresses are completely
unrelated.
So putting the quote in there will isolated.
So once you have the whatever criteria you have, go in click search.
Okay.
And as we see here, it's it was part of several data breaches.
We have a breach compilation dump last FME dump last stuff.
And if I click on here I could see that email address in the past was crusty one and we click through
here.
Sometimes capacitors will be in plain text, sometimes it'll be hashed.
Okay, in here it's the same one, the plain text.
And here we have a hash password and we have a username.
Now this is really great information because since I have a username, I could, I could take that username,
put it back in t hash, see what else it comes up with.
So if we're doing the ocean investigations, someone and we have an email address say we don't know
where else or they're a part of using D hashed using the email address.
In this case I found out that.
Okay, well, it looks like they have a Last.fm account.
It looks like they were part of this other British compilation and it came up with the username.
So again, take the username, you can put it back in D hash and find out where else that username was
being used.
Now the other thing you could do is you can copy this hash password and you can reverse a hash on it.
Try to see what that password is.
So we go here to this reverse online hash lookup and there's a lot of them out there.
The one I'm using is reverse dash, hash dash lookup period online dash domain dash tools dot com.
Okay.
I'm just going to copy that in here.
In in here.
I'm using this one because you could actually change it from now b5 sha1, sha256 lrm into Elm, etc.
and you're probably not going to know what the hash is, what type it is.
That's okay.
Like, for example, if I, if I do try to do this show when I do a reverse, it should give me an error
message.
Yeah.
Error expect of 40 characters long alphabet string.
So that's a good indication that it's not a SHA1 hash.
Speaker two I'm going to reverse that hash.
Okay.
And it looks like as a result down here, it says crusty one, which was his password.
And we can actually verify by going these other ones here, crusty one now which you could do with that
information.
You can take that password and you can again go back into the hashed.
And search it again in Syria.
Also, password was used.
Now, this isn't a guarantee that you're going to come up with that exact person.
You have a better chance if it's a unique password, like a really unique password, crusty one.
Probably not so unique, especially since SpongeBob fans might be using it, crusty crab and whatnot.
So in here we found people are using Krusty one as an email account, Yahoo account, Gmail accounts
and whatnot.
But again, if you do come up with a unique name, a unique password, going through an entry hash code
and search, searching through.
Maybe you'll get lucky.
In our case, we also found a username again through the username back and she will say came up from
you might uncover more passwords, more locations where that account might be from.
So again, this is about using hashed to help your own investigation.
Thank you for watching and I'll see you in the next video.