wneessen/go-hibp
1
1
Fork 0
mirror of https://github.com/wneessen/go-hibp.git synced 2024-12-22 18:20:38 +01:00
Code Issues Projects Releases Packages Wiki Activity
No description
86 commits 3 branches 12 tags 200 KiB
Go 100%
Find a file
Winni Neessen 179cd36d7f
#27: Implement NTLM hash support for PwnedPassAPI 
This PR implements support for NTLM hashes as announced by Troy Hunt:
https://s.pebcak.de/@troyhunt@infosec.exchange/109833758367903768

For this we needed to be able to calculate MD4 hashes, as NTLM basically is calculated like this: `MD4(UTF-16LE(pw))`. For this we ported the official golang.org/x/crypto/md4 package, so we can still claim that "only depends on Go stdlib"

A new Client option has been introduced: `WithPwnedNTLMHash`. If the client is initalized with this option, all generic methods (`ListHashesPassword` and `CheckPassword`) will  operate on NTLM hashes.

Additionally, there are now equivalent methods for checking passwords and listing hashes for NTLM: `CheckNTLM` and `ListHashesNTLM`
2023-02-09 17:07:20 +01:00
.github Implement a golangci-lint workflow and the accordingly GH action 2022-10-29 15:32:12 +02:00
.idea Initial checkin 2021-09-19 18:10:12 +02:00
md4 #27: Implement NTLM hash support for PwnedPassAPI 2023-02-09 17:07:20 +01:00
.cirrus.yml Make GoLinter happy 2021-09-21 11:26:48 +02:00
.gitignore Initial commit 2021-09-19 17:58:02 +02:00
.golangci.toml Implement a golangci-lint workflow and the accordingly GH action 2022-10-29 15:32:12 +02:00
breach.go Overhauling error handling of the different APIs as part of #24 2022-12-22 11:55:06 +01:00
breach_test.go Overhauling error handling of the different APIs as part of #24 2022-12-22 11:55:06 +01:00
codecov.yml Update codecov.yml 2022-05-07 14:59:31 +02:00
go.mod Initial checkin 2021-09-19 18:10:12 +02:00
hibp.go #27: Implement NTLM hash support for PwnedPassAPI 2023-02-09 17:07:20 +01:00
hibp_test.go #27: Implement NTLM hash support for PwnedPassAPI 2023-02-09 17:07:20 +01:00
LICENSE Initial commit 2021-09-19 17:58:02 +02:00
password.go #27: Implement NTLM hash support for PwnedPassAPI 2023-02-09 17:07:20 +01:00
password_test.go #27: Implement NTLM hash support for PwnedPassAPI 2023-02-09 17:07:20 +01:00
paste.go Overhauling error handling of the different APIs as part of #24 2022-12-22 11:55:56 +01:00
paste_test.go Fix missing HTTP response return in PastedAccount method. 2022-12-22 09:57:57 +01:00
README.md Update README.md 2022-05-09 09:14:11 +02:00
sonar-project.properties Update sonar-project.properties 2022-04-13 09:42:37 +02:00

README.md

go-hibp - Simple Go binding to the "Have I Been Pwned" API

GoDoc Go Report Card Build Status codecov Mentioned in Awesome Go buy ma a coffee

This Go library provides simple bindings to the excellent "Have I Been Pwned" (HIBP) API by Troy Hunt. It implements all 3 APIs that are provided by HIBP (Breaches, Pastes, Passwords). API key support for the private API endpoints are supported as well. go-hibp follows idiomatic Go style and best practice. It's only dependency is the Go Standard Library.

Usage

The library is fully documented using the execellent GoDoc functionality. Check out the GoDocs Reference for details on how to implement access to any of the 3 APIs with this package. You will also find GoDoc code examples there for each of those APIs.