dehashed.py
Dehashed is pretty handy for finding creds from various leaks/breaches
Search using Dehashed API
Personally I like to grab this repo, and then conduct a search like so:
dehashed.py -u you@yourdomain.com -a YOUR-API-KEY-HERE -d targetdomain.com -o
Prep captured creds for spraying
cat *cracked* | sort -uf > company-creds.txt
Then you could take the company-creds.txt
and spray them if you so desire.