PwnedPasswordsChecker – Search (Offline) If Your Password (NTLM Or SHA1 Format) Has Been Leaked

Hakin9 -  IT Security Magazine

PwnedPasswordsChecker is a resource that checks if the hash of a acknowledged password (in SHA1 or NTLM structure) is current in the record of I Have Been Pwned leaks and the range of occurrences.

You can down load the hash-coded variation for SHA1 below or the hash-coded version for NTLM in this article

Once the checklist is downloaded it is then vital to change it to binary by making use of my other tool HIBP PasswordList Slimmer

This script only functions with the HIBP version sorted by hash and entry hashes ought to be in lowercase and preferably requested by hashs

Usage:

./PwnedPasswordsChecker InputHashList HashType OutputFile CompressedHIBPHashList
./PwnedPasswordsChecker .NTLM_Checklist.txt NTLM .Output.txt .ntlm_hibp_compressed.bin

Output format : hash:occurence

Set up:

Down load the compiled variation for Home windows or Linux from release web page

If you would like to compile it you, you will need to have golang set up on your technique and execute the pursuing instructions:

git clone https://github.com/JoshuaMart/PwnedPasswordsChecker && cd PwnedPasswordsChecker
go develop primary.go

Screenshots

Thanks to the use of a “compressed” format the tool has mostly gained in overall performance, case in point of use concerning the previous model and the new one with a list of 20,000 hashes (Intel Core I7 8565U) :

Screenshot

Advancements

Truly feel totally free to call me on Twitter or do a PR to strengthen the script.

https://github.com/JoshuaMart/PwnedPasswordsChecker

The put up PwnedPasswordsChecker – Lookup (Offline) If Your Password (NTLM Or SHA1 Structure) Has Been Leaked appeared initial on Hakin9 – IT Safety Journal.

Image and Write-up Source connection

Read A lot more on Pentesting Equipment

You may also like...

Leave a Reply

Your email address will not be published. Required fields are marked *