Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/sunny/rainbowed

Test if your password is strong by searching the Web for its hash
https://github.com/sunny/rainbowed

Last synced: 4 days ago
JSON representation

Test if your password is strong by searching the Web for its hash

Awesome Lists containing this project

README

        

rainbowed
=========

Password-strength detector by searching the Web for the password's md5 hash.

Why?
----

The md5 hashes for common words and passwords appear in rainbow-dictionnaries
all over the internet.
If your password's MD5 hash appears in a Google search, you can tell it's
a bad one.

Command line usage
------------------

```sh
$ bin/rainbowed your_password
```

Example
-------

```sh
$ bin/rainbowed mypassword1
Searching for 0d28e4080dc8f64fc9603639bb7aa1b9…
Found! Do not use this as a password. Ever.

$ bin/rainbowed p4ssw0rd
Searching for 2a9d119df47ff993b662a8ef36f9ea20…
Found! Do not use this as a password. Ever.

$ bin/rainbowed mustang99
Searching for f0244ee97c7e4cfeae67c04e0b09fa26…
Found! Do not use this as a password. Ever.

$ bin/rainbowed 'asdfasdf123!'
Searching for 36b19d757e52917f32bc39afd5d1dcad…
Found! Do not use this as a password. Ever.

$ bin/rainbowed JumpToTheSky
Searching for 4f5c662f150824e0e3891646bf4b3535…
Not found. This password looks ok.
```

Note that should you try the last command now, it will come up as found, because this README is on the internet.

Install
-------

This program requires Ruby > 2. With Git and bundler (`gem install bundler`)
you can install it like so:

```sh
$ git clone https://github.com/sunny/rainbowed.git
$ cd rainbowed
$ bundle
```

You then need to add an API key in a `.env` file.

API Keys
--------

You then need to choose between using Bing or Google to search the Web.

### Bing

Create a free account with the
[Bing Search API](https://datamarket.azure.com/dataset/bing/search).

Then copy your [account key](https://datamarket.azure.com/account/keys) into
a `.env` file:

BING_API_KEY=EihJlbarSpam9/fooQipB…60UfD5h8GQaAsVGorwmS/Q32

### Google

You will need a Google API Key and you will also need to create a free
Google Custom Search Engine configured to searches on the whole internet.
Check out [google_custom_search_api](https://github.com/wiseleyb/google_custom_search_api#configure)'s
documentation on how to do that.

Once you have your API key and your search engine identifier,
paste them to a `.env` file:

GOOGLE_API_KEY=AIzaSyAcvLleVT…gm6lgtrSI6-fyUH6nblB4Gk
GOOGLE_SEARCH_CX=007591921337611290981:w899u…2w89yg