The tool sends login requests to HBO's authentication endpoints. For each credential pair, the response is analyzed:

The software takes massive lists of leaked usernames, emails, and passwords (often sourced from data breaches of unrelated websites) and systematically inputs them into the streaming platform's login page.

There’s no such thing as a free lunch — especially when that lunch is someone else’s credit card.