Subversion Repositories sysadmin_scripts

Rev

Rev 26 | Details | Compare with Previous | Last modification | View Log | RSS feed

Rev Author Line No. Line
26 rodolico 1
<html>
2
    <head>
3
        <title>Leaked Password Checker</title>
4
        <script src="https://code.jquery.com/jquery-3.4.1.min.js"></script>
5
        <script src="pwned.js"></script>
6
    </head>
7
    <body>
8
       <h2>Check for leaked passwords</h2>
9
        <label for="password">Password:</label> <input type="password" name="password" id="password"> 
10
        <button id="lookup" name="lookup">Lookup</button>
11
        <div id="result"></div>
12
        <hr>
13
        <h3>Description</h3>
14
        <p>Many passwords have been discovered by crackers getting into sites and stealing the data files containing usernames, passwords and other information.</p>
15
        <p>This web page will look up your password in those lists, without sending your password. The password you enter never leaves your computer.</p>
16
        <h3>Further information</h3>
17
        <ol>
18
           <li>The password is turned into a numeric representation (called an sha1 digest)</li>
19
           <li>The first 5 digits of that number is sent to <a href='https://www.pwnedpasswords.com>'>https://www.pwnedpasswords.com</a></li>
20
           <li><a href='https://www.pwnedpasswords.com>'>https://www.pwnedpasswords.com</a> returns a list of all digests which begin with that 5 digits</li>
21
           <li>This program then looks to see if any of them match.</li>
22
           <li>The program then tells you whether it found a match or not</li>
23
        </ol>
24
        <p><b>Note:</b> Finding a match only tells you the password is "known" by spammers and crackers. Not finding a match does not mean it is a good password. This only tells you whether the password is on one of lists commonly available on the <emp>Dark Net</emp></p>
25
        <p>This is a free service by <a href='https://dailydata.net'>Daily Data</a>, and relies on the free service located at <a href='https://haveibeenpwned.com/'>https://haveibeenpwned.com/</a>. Troy Hunt, a Microsoft Regional Director, has donated his time and money to collect many of these lists of cracked password and e-mail accounts. Feel free to help him continue these efforts by <a href='https://haveibeenpwned.com/Donate'>donating</a> on his web page.</p>
26
        <p>Want a good password you can remember? Try the free service by Bart Busschots at <a href='https://xkpasswd.net/s/'>https://xkpasswd.net/s/</a></p>
27
        <p>Mr. Hunt will also allow you to check if your e-mail address is on one of the lists he has by going to <a href='https://haveibeenpwned.com/'>https://haveibeenpwned.com/</a></p>
28
        <p>This page was created by Randell Miller at <a href="https://dailydata.net">Daily Data, Inc.</a>. You can download a copy of it for your own use (personal or business) at <a href='https://unixservertech.com/pwned.zip'>https://unixservertech.com/pwned.zip</a></p>
29
    </body>
30
</html>