ravisorg / mellt Goto Github PK
View Code? Open in Web Editor NEWA brute force password checker that returns a meaningful number describing the real world strength of your password
A brute force password checker that returns a meaningful number describing the real world strength of your password
Try and detect when the user is basing their password off a word (or multiple words) and then calculate brute force time based on that knowledge. Include common things like l33t spelling replacements, mixed case, etc.
Having a bower install for the client, is the only thing this API is lacking. It would be great if it was added. Thanks for the great library!
And when detected, calculate brute force time with that knowledge (or just mark it as zero cost, assuming the date is somehow relevant to the user and that the attacker knows some info about the user).
For example for password 'Af2Baxb8Duo' I have got 50 days to crack from node.js version, and many years from PHP and JS version.
Hi,
I might be mistaking but while I was checking the Node.js implementation of the CheckPassword
method, I noticed the following code :
exports.CheckPassword = function(password) {
//make sure it is lower case, this function can be called by itself
password = password.toLowerCase();
var common = CheckCommon(password)
return common === true ? -1 : BruteForce(password);
}
The method lower-case the password to check it against the dictionary which makes sense. However, we try to brute force the lower-cased password and not the original one. Shouldn't we do this instead ?
exports.CheckPassword = function(password) {
//make sure it is lower case, this function can be called by itself
var common = CheckCommon(password.toLowerCase());
return common === true ? -1 : BruteForce(password);
}
Same goes for the BruteForce
method. Why is Mellt
testing a lower-cased version of the password ?
Unfortunately raw.github.com is sending the mime type text/plain
so people don't use it to host files, but you can use rawgithub.com instead.
I tried several test cases with upper lower and special characters, even banging on the keyboard, and every single response is -1, and I'm pretty sure the password test i am submitting are not in the common-passwords.txt.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.