checkpassword (SHA1Hash)

WinForms app (C# / .NET 8, Windows only) that checks passwords against a pwned-password API using SHA1 hashes.

Requirements

• Windows
• .NET 8 SDK

Build / Run

dotnet run --project SHA1Hash

or build a single exe:

dotnet publish SHA1Hash -c Release

Features

• Hash — SHA1-hashes the entered string and queries https://www.home.daprogs.net/pwn/indexapi.php. Shows the hit count if the password is in the master list.
• ZeroTrust — sends only sha5 (first 5 hash chars) plus 3 chars from a random position, querying https://www.home.daprogs.net/pwn/zerotrust.php. Reveals the full hash only if the server confirms a match.
• Create Report — reads passList-tci.csv (rows: user;...;password;domain), hashes each password, queries the API, and writes compromised entries to userReport-tci.txt. Run from the directory containing the CSV.

Note

SHA1 is used only as a lookup key for the pwned-password service, not for authentication.

A Python/tkinter port of this app lives in the sibling repository checkpassword_py.