Introducing Agents.·Read
OverviewAgentsWorkflowsExecutionDeveloper ToolsSecurityLibrary
Updated Jul 15, 2026

OSINT

Hunt paste sites for leaked strings and mentions

OSINT paste-site search for credentials and brand terms.

Agent
Hunt for leaked credentialsMonitor brand and asset mentionsSchedule as a leak tripwire

overview

What pastos does

pastos searches public paste sites for the strings in --search. Hand it a comma-separated list of domains, email patterns, or product names and it returns matching pastes.

Treat it as monitoring as much as a one-off query. The same term list on a schedule becomes a tripwire for credentials, API keys, and source fragments that land on paste services.

Wire --search and optional --api-key; output is a FILE and FOLDER of matches. Pair with h8mail for email-based breach lookups, or a git secret scanner when the leak path is source control.

source github.com/carlospolop/pastos

use cases

Where pastos fits

Hunt for leaked credentials

Search paste sites for your domain and email patterns to catch credentials and keys that have been dumped publicly.

Monitor brand and asset mentions

Run a term list for product names and internal identifiers to surface pastes that reference your organization.

Schedule as a leak tripwire

Run the same search list on a schedule so new pastes mentioning your terms get flagged as they appear.

Feed an OSINT pipeline

Route paste matches into the same triage and reporting flow as other leak-hunting tools for one view of exposure.

reference

pastos inputs and flags

3 inputs
NameTypeFlagDescription
searchSTRING--searchComma-separated list of terms to search for in paste sites.
api-keySTRING--api-keyAPI key for paste-site access.
debugBOOLEAN--debugEnable debug output.

Showing key inputs. pastos exposes 3 inputs in total.

example

Run pastos

pastos · command
# search paste sites for domain and API host mentionspastos --search example.com,api.example.com --api-key "$PASTOS_API_KEY"
sample output
[+] Searching: example.com,api.example.com[+] Match: paste mentions example.com admin reset link[+] Match: paste lists api.example.com bearer token fragment[+] Match: paste dumps mail.example.com SMTP creds[+] Match: paste references staging.example.com config[+] Match: paste cites app.example.com session cookie[+] Done: 5 paste hits for search terms

guidance

Choosing pastos

Use pastos when you want to catch your strings on public paste sites: leaked credentials, API hosts, or brand mentions. It searches pastes by term. For email breach corpora, pair with h8mail; for secrets in repos, use a git secret scanner.

h8mail

Looks up breached credentials by email across leak corpora. pastos searches live paste sites by arbitrary strings.

leakos

Searches leaked secrets across broader sources. pastos targets paste sites by term.

trufflehog

Finds secrets committed to repos. pastos watches public paste sites instead of source control.

faq

pastos questions

Paste sites, for the comma-separated terms in --search. It returns pastes where those strings appear.

related

More OSINT tools

  1. dnsdumpster-dns-lookup

    Passive DNS records from DNSDumpster.

  2. dnstwist

    Generate lookalike domains and flag registered typosquats.

  3. favup

    Look up the real IP of a host from its favicon via Shodan.

  4. Infoga

    Email OSINT from public sources, with optional breach checks.

  5. maigret

    Username search that collects accounts and profile data into one dossier.

  6. socialscan

    Check whether emails and usernames are available, taken, or invalid.

Run pastos yourself

A list of search terms feeds pastos, which scans paste sites and writes the pastes that mention your strings as a queryable output.

Run pastos in TrickestBrowse the library

Facts on this page come from the live Trickest tool library.