The strong random password with python.
When you run the script, you'll have the option to choose the letter count and even whether it will be a weak or strong password and check your password on Have I Been Pwned.
Note
So you don't forget your password, I put it in a txt file "password.txt".
Install with git
git clone https://github.com/suchsoak/Strong-Password-Python.git
pip install -r requirements.txt Python3 Password.pyImportant
Keep in mind that for it to work you need to install hashlib and requests to work
You will choose [1] Strong, [2] Weak, [3] Email (API), [4] Email Hash, [5] Company or [6] Have i been pwned
__________ ___
\______ \____ ______ _______ _ __ ____ _______ __| _/
| ___/__ \ / ___// ___/ \/ \/ // __ \\_ __ \/ __ |
| | / __ \_\___ \ \___ \ \ /( \_\ )| | \/ /_/ |
|____| (____ /____ \____ \ \/\_/ \____/ |__| \____ |
\/ \/ \/ \/
BY: suchsoak
Github: https://github.com/suchsoak
V.1.0.3
[1] Strong
[2] Weak
[3] Email (API)
[4] Email Hash
[5] Company
[6] Have i been pwned
Password
__________ ___
\______ \____ ______ _______ _ __ ____ _______ __| _/
| ___/__ \ / ___// ___/ \/ \/ // __ \_ __ \/ __ |
| | / __ \_\___ \ \___ \ \ /( \_\ )| | \/ /_/ |
|____| (____ /____ \____ \ \/\_/ \____/ |__| \____ |
\/ \/ \/ \/
BY: suchsoak
Github: https://github.com/suchsoak
v.1.0.3
[1] Strong
[2] Weak
[3] Email (API)
[4] Email Hash
[5] Company
[6] Have i been pwned
Put the namber: 1
--------------
[!] Strong
--------------
Quantity: 20calc_time: Time taken to calculate the password strength.
crack_times_display: Time estimates to crack the password in different scenarios.
crack_times_seconds: Time estimates to crack the password in seconds.
feedback: Feedback on the password, such as suggestions to improve it.
guesses: Number of guesses required to crack the password.
guesses_log10: Logarithm base 10 of the number of guesses required to crack the password.
password: The password that was evaluated.
score: Password score based on its strength.
sequence: A sequence of tokens (parts) of the password that were individually analyzed.{
'password': 'JohnSmith123',
'score': 2,
'guesses': 2567800,
'guesses_log10': 6.409561194521849,
'calc_time': datetime.timedelta(0, 0, 5204)
'feedback': {
'warning': '',
'suggestions': [
'Add another word or two. Uncommon words are better.',
"Capitalization doesn't help very much"
]
},
'crack_times_display': {
'offline_fast_hashing_1e10_per_second': 'less than a second'
'offline_slow_hashing_1e4_per_second': '4 minutes',
'online_no_throttling_10_per_second': '3 days',
'online_throttling_100_per_hour': '3 years',
},
'crack_times_seconds': {
'offline_fast_hashing_1e10_per_second': 0.00025678,
'offline_slow_hashing_1e4_per_second': 256.78
'online_no_throttling_10_per_second': 256780.0,
'online_throttling_100_per_hour': 92440800.0,
},
'sequence': [{
'matched_word': 'john',
'rank': 2,
'pattern': 'dictionary',
'reversed': False,
'token': 'John',
'l33t': False,
'uppercase_variations': 2,
'i': 0,
'guesses': 50,
'l33t_variations': 1,
'dictionary_name': 'male_names',
'base_guesses': 2,
'guesses_log10': 1.6989700043360185,
'j': 3
}, {
'matched_word': 'smith123',
'rank': 12789,
'pattern': 'dictionary',
'reversed': False,
'token': 'Smith123',
'l33t': False,
'uppercase_variations': 2,
'i': 4,
'guesses': 25578,
'l33t_variations': 1,
'dictionary_name': 'passwords',
'base_guesses': 12789,
'guesses_log10': 4.407866583030775,
'j': 11
}],
}
__________ ___
\______ \____ ______ _______ _ __ ____ _______ __| _/
| ___/__ \ / ___// ___/ \/ \/ // __ \_ __ \/ __ |
| | / __ \_\___ \ \___ \ \ /( \_\ )| | \/ /_/ |
|____| (____ /____ \____ \ \/\_/ \____/ |__| \____ |
\/ \/ \/ \/
BY: suchsoak
Github: https://github.com/suchsoak
v.1.0.3
[1] Strong
[2] Weak
[3] Email (API)
[4] Email Hash
[5] Company
[6] Have i been pwned
Put the namber: 1
--------------
[!] Strong
--------------
Quantity: 20
-----------------
[!] Your STRONG password: 21GJu>*KrjeC{hds"~ca
-----------------
[*] Your Password is saven in: password.txt
[*] Information about your password:
{
"calc_time": "0:00:00.005670",
"crack_times_display": {
"offline_fast_hashing_1e10_per_second": "centuries",
"offline_slow_hashing_1e4_per_second": "centuries",
"online_no_throttling_10_per_second": "centuries",
"online_throttling_100_per_hour": "centuries"
},
"crack_times_seconds": {
"offline_fast_hashing_1e10_per_second": "10000000000.0000000001",
"offline_slow_hashing_1e4_per_second": "10000000000000000.0001",
"online_no_throttling_10_per_second": "10000000000000000000.1",
"online_throttling_100_per_hour": "3600000000000000199876.144433"
},
"feedback": {
"suggestions": [],
"warning": ""
},
"guesses": 100000000000000000001,
"guesses_log10": 20.0,
"password": "21GJu>*KrjeC{hds\"~ca",
"score": 4,
"sequence": [
{
"guesses": 100000000000000000000,
"guesses_log10": 20.0,
"i": 0,
"j": 19,
"pattern": "bruteforce",
"token": "21GJu>*KrjeC{hds\"~ca"
}
]
}This is a request to find out if your email has been leaked on the dark web, using the Have i Been pwned API. But for that you need the API key
You need have the API key
Put your API key: admin@gmail.com Put your API key: 01010.00100.010.101Part of the script
email = input("Put the email:")
API = input("Put your API key:")
url = f"https://haveibeenpwned.com/api/v3/breachedaccount/{email}"
headers = {"hibp-api-key": "{API}"} The Email hash it creates a hash of the email you put in and checks if that hash has already been leaked, it's an attempt to use the API for free. But it's not 100% that it will work.
It's the same thing you do as option 6 sends a hash that checks whether or not it's already been leaked.
Part of the code
email_1 = input("Put your Email:" )
colorama.init()
print(Fore.RED)
print("\t")
Email = email_1
hash_password = hashlib.sha1(Email.encode('utf-8')).hexdigest().upper()
url = f"https://api.pwnedpasswords.com/range/{hash_password[:5]}"
req = requests.get(url)
hashes = req.text.split('\n')
pwned = False
for hash in hashes:
if hash.startswith(hash_password[5:]):
pwned = True
break
if pwned:
print("[!] Yes, your email has been pwned.")
else:
print("[!] No, your email has not been pwned.")| API | Link |
|---|---|
| haveibeenpwned | https://haveibeenpwned.com/API/v3#BreachModel |
Company
Put the number: 5
Put the Company:sony
{"Name":"Sony","Title":"Sony","Domain":"sony.com","BreachDate":"2011-06-02","AddedDate":"2013-12-04T00:00:00Z","ModifiedDate":"2013-12-04T00:00:00Z","PwnCount":37103,"Description":"In 2011, Sony suffered breach after breach after breach — it was a <em>very</em> bad year for them. The breaches spanned various areas of the business ranging from the PlayStation network all the way through to the motion picture arm, Sony Pictures. A SQL Injection vulnerability in <a href=\"http://www.sonypictures.com\" target=\"_blank\" rel=\"noopener\">sonypictures.com</a> lead to <a href=\"http://www.troyhunt.com/2011/06/brief-sony-password-analysis.html\" target=\"_blank\" rel=\"noopener\">tens of thousands of accounts across multiple systems being exposed</a> complete with plain text passwords.","LogoPath":"https://haveibeenpwned.com/Content/Images/PwnedLogos/Sony.png","DataClasses":["Dates of birth","Email addresses","Genders","Names","Passwords","Phone numbers","Physical addresses","Usernames"],"IsVerified":true,"IsFabricated":false,"IsSensitive":false,"IsRetired":false,"IsSpamList":false,"IsMalware":false,"IsSubscriptionFree":false}
Don't have nothing about this company: sony
Note that for this to work you need to get the curl tool which in turn is already standard for any operating system to get it
s.system(f'\ncurl https://haveibeenpwned.com/api/v3/breach/{Company}\n') https://haveibeenpwned.com/api/v3/breach/sony https://haveibeenpwned.com/api/v3/breach/adobeHave i been pwned
print("Have I Been Pwned")
Password = Password
hash_password = hashlib.sha1(Password.encode('utf-8')).hexdigest().upper()
url = f"https://api.pwnedpasswords.com/range/{hash_password[:5]}"
req = requests.get(url)
hashes = req.text.split('\n')
pwned = False
for hash in hashes:
if hash.startswith(hash_password[5:]):
pwned = True
break
if pwned:
print("[!] Yes, your password has been pwned.")
else:
print("[!] No, your password has not been pwned.")
time.sleep(2)You can now put an option to verify a specific password of yours that you may or may not have already leaked on the dark web
Put the namber: 6
___
______ __ _ __ ____ ____ __| _/
\____ \\ \/ \/ // \_/ __ \ / __ |
| |_\ \\ /| | \ ___/_ /_/ |
| ___/ \/\_/ |___| /\___ /____ |
|__| \/ \/ \/
Put your PASSWORD:
MIT License Copyright (c) 2024 ~#M?x