No. We do not disclose the password identified, only the accounts that have easily guessed passwords. The customer provides to us the masked file of useracccount / hashes. We run our tool and report back on which accounts have passwords that are in this consolidated list of dark web passwords.
For example, suppose that the account xyzadmin is using “Pa55Word”. When we run our tool, we can identify the weak password but only report back to the customer that userid xyzadmin has an easily guessed password and that the password should be reset.
Someone should offer that as an on-demand paid service. Does anyone?