2610.1 - Adding readme
This commit is contained in:
1 parent
5c61311b93
commit
e226f5d36f
1 file changed
+32
@@ -0,0 +1,32 @@
|
||||
# checkpassword (SHA1Hash)
|
||||
|
||||
WinForms app (C# / .NET 8, Windows only) that checks passwords against a pwned-password API using SHA1 hashes.
|
||||
|
||||
## Requirements
|
||||
|
||||
- Windows
|
||||
- .NET 8 SDK
|
||||
|
||||
## Build / Run
|
||||
|
||||
```
|
||||
dotnet run --project SHA1Hash
|
||||
```
|
||||
|
||||
or build a single exe:
|
||||
|
||||
```
|
||||
dotnet publish SHA1Hash -c Release
|
||||
```
|
||||
|
||||
## Features
|
||||
|
||||
- **Hash** — SHA1-hashes the entered string and queries `https://www.home.daprogs.net/pwn/indexapi.php`. Shows the hit count if the password is in the master list.
|
||||
- **ZeroTrust** — sends only `sha5` (first 5 hash chars) plus 3 chars from a random position, querying `https://www.home.daprogs.net/pwn/zerotrust.php`. Reveals the full hash only if the server confirms a match.
|
||||
- **Create Report** — reads `passList-tci.csv` (rows: `user;...;password;domain`), hashes each password, queries the API, and writes compromised entries to `userReport-tci.txt`. Run from the directory containing the CSV.
|
||||
|
||||
## Note
|
||||
|
||||
SHA1 is used only as a lookup key for the pwned-password service, not for authentication.
|
||||
|
||||
A Python/tkinter port of this app lives in the sibling repository `checkpassword_py`.
|
||||
Reference in new issue
Block a user