All Projects → xsist10 → HaveIBeenPwned

xsist10 / HaveIBeenPwned

Licence: MIT License
PHP client for the haveibeenpwned.com API

Programming Languages

PHP
23972 projects - #3 most used programming language

Projects that are alternatives of or similar to HaveIBeenPwned

Firepwned
🙏 Checks Firefox saved passwords against known data leaks using the Have I Been Pwned API.
Stars: ✭ 69 (+360%)
Mutual labels:  password-safety
Netpwn
Tool made to automate tasks of pentesting.
Stars: ✭ 152 (+913.33%)
Mutual labels:  password-safety
password-list
Password lists with top passwords to optimize bruteforce attacks
Stars: ✭ 174 (+1060%)
Mutual labels:  password-safety
Pwned Passwords
🔐Go client library for checking values against compromised HIBP Pwned Passwords
Stars: ✭ 81 (+440%)
Mutual labels:  password-safety
Passpwn
See if your passwords in pass has been breached.
Stars: ✭ 130 (+766.67%)
Mutual labels:  password-safety
keevault
Kee Vault is a password manager for your web browser. Password databases (Vaults) are encrypted using the KeePass storage format before being sent to a remote server for synchronisation across any modern device/browser
Stars: ✭ 57 (+280%)
Mutual labels:  password-safety
Probable Wordlists
Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!
Stars: ✭ 7,312 (+48646.67%)
Mutual labels:  password-safety
CloudRemoting
CloudRemoting PowerShell module - an easier way to PSRemoting, RDP and SSM Run Commands.
Stars: ✭ 18 (+20%)
Mutual labels:  password-safety
Webscrypt
a fast and lightweight scrypt hash algorithm for browser
Stars: ✭ 144 (+860%)
Mutual labels:  password-safety
mopass
A OpenSource Clientless & Serverless Password Manager
Stars: ✭ 40 (+166.67%)
Mutual labels:  password-safety
Password Leak
A library to check for compromised passwords
Stars: ✭ 92 (+513.33%)
Mutual labels:  password-safety
Lil Pwny
Fast, offline auditing of Active Directory passwords using Python.
Stars: ✭ 117 (+680%)
Mutual labels:  password-safety
noodlog
🍜 Parametrized JSON logging library in Golang which lets you obfuscate sensitive data and marshal any kind of content.
Stars: ✭ 42 (+180%)
Mutual labels:  password-safety
Dumb Passwords
Don't let your user be a victim of their own action
Stars: ✭ 77 (+413.33%)
Mutual labels:  password-safety
PwnedPasswords
PwnedPasswords as a Service
Stars: ✭ 24 (+60%)
Mutual labels:  password-safety
Azure password harvesting
Plaintext Password harvesting from Azure Windows VMs
Stars: ✭ 61 (+306.67%)
Mutual labels:  password-safety
Password Strength
Angular UI library to illustrate and validate a password's strength with material design - Angular V9 supported
Stars: ✭ 186 (+1140%)
Mutual labels:  password-safety
laravel-pwned-passwords
Simple Laravel validation rule that allows you to prevent or limit the re-use of passwords that are known to be pwned (unsafe). Based on TroyHunt's Have I Been Pwned (https://haveibeenpwned.com)
Stars: ✭ 67 (+346.67%)
Mutual labels:  password-safety
RockYou2021.txt
RockYou2021.txt is a MASSIVE WORDLIST compiled of various other wordlists. RockYou2021.txt DOES NOT CONTAIN USER:PASS logins!
Stars: ✭ 288 (+1820%)
Mutual labels:  password-safety
goLazagne
Go library for credentials recovery
Stars: ✭ 177 (+1080%)
Mutual labels:  password-safety

HaveIBeenPwned PHP client

Build Status

Install

{
    "require": {
        "xsist10/haveibeenpwned": "~1.0"
    }
}

Usage

Create manager instance

use xsist10\HaveIBeenPwned\HaveIBeenPwned;
use xsist10\HaveIBeenPwned\Adapter\Curl;
use xsist10\HaveIBeenPwned\Adapter\FileGetContents;

// By default the $manager will use a Curl adapter
$manager = new HaveIBeenPwned();

// You can create a new manager with a specified adapter
$manager = new HaveIBeenPwned(new Curl());

// You can also set the adapter after creation
$manager->setAdapter(new FileGetContents());

Check if you've been pwned

$manager->checkAccount("your_email_address");

Check if your account has been leaked in a paste

$manager->getPasteAccount("your_email_address");

Check if your password has been leaked before

// Your password is not sent to the remote API. Only a partial of the SHA1
// value is sent and all matching full SHA1 results are returned and compared.
$numberOfTimesCompromised = $manager->isPasswordCompromised("your_password");

List all breaches that have are on record

$manager->getBreaches();

$manager->getBreach('specific_breach_by_name');

List the types of data that are covered when describing a leak

$manager->getDataClasses();

Logger Support

The adapters support PSR-3 Logger. I recommend using monolog.

Install Monolog

$ composer require monolog/monolog

Use Monolog with HaveIBeenPwned

use xsist10\HaveIBeenPwned\HaveIBeenPwned;
use xsist10\HaveIBeenPwned\Adapter\Curl;

use Monolog\Logger;
use Monolog\Handler\StreamHandler;

$log = new Logger('name');
// Push all logging up to the level of DEBUG to our log file
$log->pushHandler(new StreamHandler('[full log filename]', Logger::DEBUG));

$adapter = new Curl();
$adapter->setLogger($log);
$manager = new HaveIBeenPwned($adapter);

// Calls made to HaveIBeenPwned will be logged to your log file now

Credits

License

The MIT License (MIT). Please see License File for more information.

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].