ZeroTrace OSINT
Pastebin Search
Cross-source search of public paste sites and Github gists for a string — find leaked secrets, IOC dumps, mentions of a target.
The pastebin search tool searches multiple public paste-sharing sites for a string. Useful when you suspect a credential, a target name, or an IOC has been published on a paste site.
Sources searched
| Source | What it covers |
|---|---|
| DuckDuckGo paste-site dorks | Indexed paste content across major paste sites (Pastebin, GitHub Gist, Hastebin, etc.) |
| Github code search | Public Github code matching the query |
| Github gist search | Public Gist content matching the query |
| Wayback CDX | Wayback Machine captures of paste URLs |
The tool merges results across sources and dedupes by content hash where possible.
What you get
For each match:
| Field | What it shows |
|---|---|
| Source | Which engine returned the hit |
| URL | Direct link to the paste / gist / cached page |
| Snippet | Excerpt around the match |
| Date | When the paste was created (where the source provides it) |
| Title | Paste title where present |
When to use it
- Looking for leaked credentials. Paste the email or domain you want to check.
- Tracking IOC mentions. Paste an IP, domain, or hash to find security-research notes that have referenced it.
- Following a target. Paste a unique target identifier to find notes other researchers have published.
- Confirming a leak claim. A subject claims data was posted; this tool searches whether it is currently visible.
Searching paste sites for sensitive strings (passwords, API keys, PII) is itself a search-engine query. Compose your queries carefully — a password searched across multiple paste-search engines is a password the search-engine providers now know you cared about. For maximum opsec, search hashes rather than plaintexts.
Per-hit IOC extraction
A one-click "extract IOCs" affordance composes the IOC extractor against the snippet. Useful when a paste contains many IOCs — extract once, pin the results to a profile in bulk.
Dedupe by content hash
Many pastes are reposts of the same content. The tool computes a content hash on the snippet and groups duplicates so you see each unique paste once, with the count of mirrors.
Pivots
| Click on... | Pivot to |
|---|---|
| Paste URL | URL parser, redirect analyzer, Wayback |
| Snippet text | IOC extractor |
| Matched string | (no pivot — informational) |
Bulk search
Bulk paste accepts multiple search strings. Aggregate result shows per-string hit counts — useful for triage of "search every email in this list for paste-site presence."
Sources attribution
Every source the tool queried is named on the result. Hits are tagged with their source so you can weight results by your trust in the engine.
Coverage caveats
Paste-site search is best-effort. Some pastes are deleted before indexing; some are private; some are on sites the search engines do not index. A negative result does not mean the content has never been pasted — it means it is not currently visible to the engines we query.