Breach-Data Cross-Reference
osint · easy · +30 XP
Target
GET /api/lab/breach-data-101/lookup?email=... (mock HIBP — lists breaches the email is in)
GET /api/lab/breach-data-101/dump?breach=... (per-breach paste with cleartext entries)
POST /api/lab/breach-data-101/submit body {reused_password}
Goal: look up alex.reed@acme-research.io. It's in 3 breaches. Two of them ship cleartext passwords. Both leaked passwords are the same — that's the reused password. Submit it.
// AI hint · first is free · then 1 credit or 5 XP
// attack console
/api/lab/breach-data-101/
// reuse on the cli
// submit flag
// no solves yet
5 of 11 · osint