Skip to content
This repository has been archived by the owner on Apr 6, 2023. It is now read-only.

OWASP/passfault-docker

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

20 Commits
 
 
 
 
 
 

Repository files navigation

OWASP Passfault: Do Passwords Better!

This image contains the passfault password analysis JSON service for enforcing a new kind of password policy. This image is intended to be built on to add you own custom wordlists.

Getting OWASP Passfault in Docker

This fetches the passfault docker image docker pull ccaamm/passfault

This creates and starts a passfault docker instance

docker run -d ccaamm/passfault

You can verify it is up and running at https://{container-ip}:8080

Alternatively you can map the internal port to an external port of the server hosting the container:

docker run -d -p 8080:8080 ccaamm/passfault

Make Passfault Your Own

You want to add your own wordlists? Or maybe turn off some of the built-in wordlists? This image defines the PASSFAULT_WORDLISTS environment variable for you to ADD your own wordlists too. Also in that same directory is a wordlists.properties that needs to be replaced or appended with configuration for the new wordlists. The syntax for the wordlists is self-described in the default configuration file here: https://github.com/owasp/passfault/blob/master/wordlists/wordlists/words.properties

To simplify extending the image, here is a custom passfault docker template: https://github.com/owasp/passfault-docker-template

TLS

You want TLS turned on for passfault in docker? This can also be done by extending this image. The passfault-docker-template shows how to put your own certificate into passfault, or by default generates a keystore with a self-signed certificate and starts up with SSL enabled: https://github.com/owasp/passfault-docker-template