The great thing about this white hat kind of project is there’s always more work to be done. Great for intermediate beginners that like trolling as a force for good

To make it harder for him to sort through the list, you should just random select from the list of top 10k commonly used passwords instead of auto generating them.

Unless you have that thing running all the time (looping), then your requests will all basically be in one giant block with 8 character passwords. It would be easy for him to crop them out. It would be better to kick them out slower with a bigger name base that's more randomized with passwords that are better randomized (including length). And run it constantly.

That was a delight to watch. I’m learning Python and I find this so inspiring.

Breaking news man in Nigeria with no family or friends dies with millions of dollars of cash he had been trying to give away

I think this is my new favorite channel...

I have no idea what just happened but I'm glad it did

A way to make this more convincing would be to have a 1000 most common passwords json file and a 10 most common email providers json file (or just a list), load those and it will be very convincing. Also, you could make it randomly sleep or get it done in batches as well if he stores a created_at time.

Imagine if you had one of those emails and were wondering how scammers gets your email

You know this mans legit because he uses incognito mode

You need to run this as a service across multiple IPs over several days/weeks so he can’t easily delete your responses.

he is just going to delete everything from yahoo during that time span

I've been learning C for the last two months and I'm so damn happy that I can understand what you're doing. I doubt I could implement it right now, but just understanding it is so cool to me.

Maybe a better idea is to try to make passwords seem legit, also adding random names or literally the whole dictionary, cuz not everyone makes their passwords in symbols, but instead words or phrases, so if he just scrolls through the yahoo and passwords lists and find a combination that seems unique, he will know which one is the real one and which one is not.

You should randomize the length of the password, and randomize the domain of the email. As it is, all he has to do is filter out all yahoo domains with a password length of 8, and he would have minimal loss of acquired real passwords.