diff --git a/peh/3-eth-hack/recon.md b/peh/3-eth-hack/recon.md
index 4375c94..e13909c 100644
--- a/peh/3-eth-hack/recon.md
+++ b/peh/3-eth-hack/recon.md
@@ -23,7 +23,7 @@
 - fingerprinting
   - `nmap`, `wappalyzer`, `netcat`, etc
 - data breaches
-  - HaveIBeenPwned, Breach-Parse, WeLeakInfo
+  - [HaveIBeenPwned](https://haveibeenpwned.com/), Breach-Parse, WeLeakInfo
 
 
 
@@ -62,6 +62,8 @@
 
 ## Breached credentials
 
+➡️ [HaveIBeenPwned](https://haveibeenpwned.com/) - Check if your email address is in a data breach
+
 ➡️ [breach-parse](https://github.com/hmaverickadams/breach-parse) - A tool for parsing breached passwords
 
 - `BreachCompilation` password list (44GB) file comes from breached password dumps
diff --git a/peh/peh-references.md b/peh/peh-references.md
index b4a5c9c..fadd6a9 100644
--- a/peh/peh-references.md
+++ b/peh/peh-references.md
@@ -71,6 +71,7 @@
 - [Clearbit Connect](https://clearbit.com/resources/tools/connect)
 - [EmailHippo Email address verifiy](https://tools.emailhippo.com/)
 - [Email-checker](https://email-checker.net/)
+- [HaveIBeenPwned](https://haveibeenpwned.com/)
 - [breach-parse](https://github.com/hmaverickadams/breach-parse)
 - [DeHashed.com](https://dehashed.com/)
 - [Hashes.com](https://hashes.com/en/decrypt/hash)