{"id":15115791,"url":"https://github.com/GhostPack/DeepPass","last_synced_at":"2025-09-27T21:31:06.420Z","repository":{"id":38971872,"uuid":"498837717","full_name":"GhostPack/DeepPass","owner":"GhostPack","description":"Hunting for passwords with deep learning","archived":false,"fork":false,"pushed_at":"2024-05-10T07:56:27.000Z","size":4554,"stargazers_count":192,"open_issues_count":3,"forks_count":35,"subscribers_count":5,"default_branch":"main","last_synced_at":"2024-09-27T01:49:47.255Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Jupyter Notebook","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/GhostPack.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2022-06-01T17:40:08.000Z","updated_at":"2024-09-24T21:02:09.000Z","dependencies_parsed_at":"2022-09-06T00:52:37.554Z","dependency_job_id":null,"html_url":"https://github.com/GhostPack/DeepPass","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GhostPack%2FDeepPass","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GhostPack%2FDeepPass/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GhostPack%2FDeepPass/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GhostPack%2FDeepPass/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/GhostPack","download_url":"https://codeload.github.com/GhostPack/DeepPass/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":234460505,"owners_count":18836837,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-09-26T01:44:01.211Z","updated_at":"2025-09-27T21:31:04.554Z","avatar_url":"https://github.com/GhostPack.png","language":"Jupyter Notebook","readme":"# DeepPass\n\nDockerized application that analyzes documents for password candidates.\n\nThe blogpost [\"DeepPass — Finding Passwords With Deep Learning\"](https://posts.specterops.io/deeppass-finding-passwords-with-deep-learning-4d31c534cd00) gives more detail on the approach and development of the model.\n\nTo run: `docker-compose up`\n\nThis will expose http://localhost:5000 where documents can be uploaded.\n\nThe API can manually be used at `http://localhost:5000/api/passwords` :\n\n```\nC:\\Users\\harmj0y\\Documents\\GitHub\\DeepPass\u003ecurl -F \"file=@test_doc.docx\" http://localhost:5000/api/passwords\n[{\"file_name\": \"test_doc.docx\", \"model_password_candidates\": [{\"left_context\": [\"for\", \"the\", \"production\", \"server\", \"is:\"], \"password\": \"P@ssword123!\", \"right_context\": [\"Please\", \"dont\", \"tell\", \"anyone\", \"on\"]}, {\"left_context\": [\"that\", \"the\", \"other\", \"password\", \"is\"], \"password\": \"LiverPool1\", \"right_context\": [\".\", \"This\", \"is\", \"our\", \"backup.\"]}], \"regex_password_candidates\": [{\"left_context\": [\"for\", \"the\", \"production\", \"server\", \"is:\"], \"password\": \"P@ssword123!\", \"right_context\": [\"Please\", \"dont\", \"tell\", \"anyone\", \"on\"]}], \"custom_regex_matches\": null}]\n```\n\n[Apache Tika](https://hub.docker.com/r/apache/tika) is used to extract data from [various document formats](https://tika.apache.org/0.9/formats.html). [Tensorflow Serving](https://hub.docker.com/r/tensorflow/serving) is used for serving the model.\n\nThe neural network is Bidirectional LSTM:\n\n```\nembedding_dimension = 20\ndropout = 0.5\ncells = 200\n\nmodel = Sequential()\nmodel.add(Embedding(total_chars, embedding_dimension, input_length=32, mask_zero=True))\nmodel.add(Bidirectional(LSTM(cells)))\nmodel.add(Dropout(dropout))\nmodel.add(Dense(1, activation='sigmoid'))\n```\n\nIt was trained on 2,000,000 passwords randomly selected from [this leaked password list](https://crackstation.net/files/crackstation-human-only.txt.gz) and 2,000,000 extracted terms from various Google dorked documents. The stats for the .1 test set are:\n\n```\n------------------\nloss       :  0.04804224148392677\ntn         :  199446.0\nfp         :  731.0\nfn         :  3281.0\ntp         :  196542.0\n------------------\naccuracy   :  0.9899700284004211\nprecision  :  0.9962944984436035\nrecall     :  0.983580470085144\n------------------\nF1 score.     :  0.9898966618590025\n------------------\n```\n\nThe training notebook for the model is in  `./notebooks/password_model_bilstm.ipynb`","funding_links":[],"categories":["Jupyter Notebook"],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FGhostPack%2FDeepPass","html_url":"https://awesome.ecosyste.ms/projects/github.com%2FGhostPack%2FDeepPass","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FGhostPack%2FDeepPass/lists"}