Windows tool for working with stealer logs. Unpack archives, pull credentials, search for cards/TData/wallets, check Telegram sessions. (Windows 10/11, 64-bit.)
Official site: source-shade.com
Download: Releases → get TSP68-v1.08.zip, extract, run TSP68Checker.exe
- Archive to url:login:password
- Archive extractor
- Extra Searcher (credit cards, TDATA, wallets, bruteforce.txt)
- Split or Join
- TXT Manager
- TData Checker
Takes password logs from stealer archives (or already extracted folders) and converts them into clean url:login:password lines.
The tool goes through nested archives, finds common password files like passwords.txt and All Passwords.txt, reads different field names (URL, HOST, LOGIN, EMAIL, PASS, etc.), removes duplicates, and saves everything to ulp.txt.
We ran a real comparison on a ~50 GB batch against RequestHunter. RequestHunter returned 1,546,049 lines. TSP68 Checker returned 5,981,105 lines. Same data, very different result.
Supports ZIP, RAR (including multi-part .part01.rar), 7z, TAR, GZ and more. Add your archive passwords in Settings before you start.
Unpacks archives into separate folders. Uses the password list from Settings, runs multi-threaded, and writes failed archives to errorarchives.txt so you can see what broke and why.
Pick what you want to search for, then point it at archives or folders:
- Credit cards — finds and formats card data from known log file names
- TDATA — copies Telegram
tdatafolders into numbered output folders - Wallets — pulls
walletsfolders from typical stealer layouts - bruteforce.txt — collects bruteforce password files that sit next to wallet data
Turn on only the modules you need and run one job.
Basic TXT utilities. Split a large file by size (MB), line count, or number of parts. Or merge several TXT files into one.
Load one or more TXT files, type search terms (one per line — a word, domain, phone number, whatever), and pull out every matching line. Good for hunting specific targets inside huge dumps. Results go to Desktop\TSP68\TXTManager.
Finds tdata folders inside archives or on disk and checks whether they are usable.
Without Python: structure check only. Fast, no extra setup.
With Python 3.11 (see Tools\readme.txt): full live Telegram check — phone, premium status, 2FA, dialog count, and more.
In Settings you can set up a Telegram bot (bot token + chat/group ID) to automatically zip and send live-valid TData sessions to your channel. Proxy support is there too (HTTP, SOCKS4, SOCKS5) with a test button on the TData page.
This program does not contain viruses or malware. That is stated on the home screen inside the app itself.
If you are unsure, run it on a clean RDP or VM, watch incoming/outgoing traffic, and check what it does. Security-minded people have reviewed it. The codebase is built specifically for stealer-log workflows.
Do not use tools like RequestHunter. They are known to ship infected builds. TSP68 Checker was made as a cleaner, faster alternative.
This software is free. Now and always. If someone charged you money for it, you were scammed. Official builds live here and on source-shade.com.
- C# / .NET 8 (WPF) — the main application (TSP68Checker.exe)
- Python (optional) — only the Tools folder, for live TData checking. The app works without Python for everything else.
- 6 languages: English, Turkish, Russian, German, Arabic, Indonesian
- Multi-threaded processing, works on weaker PCs
- Long jobs open a console window so the GUI does not freeze
- For live TData checks: install Python 3.11 and follow
Tools\readme.txt
Use only on data you are allowed to process.
Maintained by source-shade.com