From e226f5d36fd7fd48cdc7e127f6ce18f10fd64567 Mon Sep 17 00:00:00 2001 From: DAProgs Date: Sun, 11 Oct 2026 21:43:40 -0400 Subject: [PATCH] 2610.1 - Adding readme --- README.md | 32 ++++++++++++++++++++++++++++++++ 1 file changed, 32 insertions(+) create mode 100644 README.md diff --git a/README.md b/README.md new file mode 100644 index 0000000..dcaac7c --- /dev/null +++ b/README.md @@ -0,0 +1,32 @@ +# checkpassword (SHA1Hash) + +WinForms app (C# / .NET 8, Windows only) that checks passwords against a pwned-password API using SHA1 hashes. + +## Requirements + +- Windows +- .NET 8 SDK + +## Build / Run + +``` +dotnet run --project SHA1Hash +``` + +or build a single exe: + +``` +dotnet publish SHA1Hash -c Release +``` + +## Features + +- **Hash** — SHA1-hashes the entered string and queries `https://www.home.daprogs.net/pwn/indexapi.php`. Shows the hit count if the password is in the master list. +- **ZeroTrust** — sends only `sha5` (first 5 hash chars) plus 3 chars from a random position, querying `https://www.home.daprogs.net/pwn/zerotrust.php`. Reveals the full hash only if the server confirms a match. +- **Create Report** — reads `passList-tci.csv` (rows: `user;...;password;domain`), hashes each password, queries the API, and writes compromised entries to `userReport-tci.txt`. Run from the directory containing the CSV. + +## Note + +SHA1 is used only as a lookup key for the pwned-password service, not for authentication. + +A Python/tkinter port of this app lives in the sibling repository `checkpassword_py`.