From troyhunt.com
It’s increasingly hard to know what to do with data like that from Cit0Day. If that’s an unfamiliar name to you, start with Catalin Cimpanu’s story on the demise of the service followed by the subsequent leaking of the data. The hard bit for me is figuring out whether it’s pwn-worthy enough to justify loading it into Have I Been Pwned (HIBP) or if it’s just more noise that ultimately doesn’t really help people make informed decisions about their security posture. More on that shortly, let’s start with what’s in there and we’re looking at a zip file named “Cit0day.in_special_for_xss.is.zip” that’s 13GB when compressed: