https://github.com/mfernstrom/asva-js-password-package
An NPM package to test passwords against several OWASP ASVA, NIST, and CWE rules
https://github.com/mfernstrom/asva-js-password-package
appsec asva npm-package owasp password
Last synced: 2 months ago
JSON representation
An NPM package to test passwords against several OWASP ASVA, NIST, and CWE rules
- Host: GitHub
- URL: https://github.com/mfernstrom/asva-js-password-package
- Owner: MFernstrom
- License: mit
- Created: 2020-06-30T13:32:56.000Z (almost 5 years ago)
- Default Branch: master
- Last Pushed: 2020-07-01T22:34:05.000Z (almost 5 years ago)
- Last Synced: 2025-03-10T16:56:01.970Z (3 months ago)
- Topics: appsec, asva, npm-package, owasp, password
- Language: JavaScript
- Homepage:
- Size: 60.5 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- License: LICENSE
Awesome Lists containing this project
README
# ASVA JS Password check
Easily check a password against OWASP ASVA v4. 2.1.1, 2.1.3, 2.1.7 / NIST 5.1.1.2 / CWE-521 requirements for minimum character count and common passwords.
2.1.1 - Minimum character count 12 and top common passwords.
2.1.3 - Passwords CAN contain spaces. Multiple consecutive spaces are truncated to single spaces
2.1.7 - Password is checked against top 10.000 most common passwords sourced from https://github.com/danielmiessler/SecLists/tree/master/Passwords/Common-Credentials
(commit a3416ba on May 27)
## OWASP ASVA
https://owasp.org/www-project-application-security-verification-standard/ (v4.0.1 is the latest as of this package release)
## NIST
https://pages.nist.gov/800-63-3/sp800-63b.html
## CWE
https://cwe.mitre.org/data/definitions/521.html
## Install
`npm i @marcusfernstrom/asva-password`
## Use
Pass a string to check and get back a map.
```
const passwordCheck = require('@marcusfernstrom/asva-password')
const result = passwordCheck('sunshine')
{ passed: false, tooShort: true, tooCommon: true }
```
```
const passwordCheck = require('@marcusfernstrom/asva-password')
const result = passwordCheck('passwordsarecool')
{ passed: true }
```