-
Notifications
You must be signed in to change notification settings - Fork 5
/
pwcheck.html
72 lines (68 loc) · 2.87 KB
/
pwcheck.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
<html>
<head>
<title>Have I Been Pwned Password Checker</title>
<meta property="og:title" content="Have I Been Pwned Password Checker">
<meta property="og:description" content="Simple HTML file for Have I Been Pwned Password API">
<meta property="og:image" content="https://haveibeenpwned.com/Content/Images/SocialLogo.png">
<meta name="twitter:card" content="summary_large_image">
</head>
<body>
<center>
<h1>Have I Been Pwned Password Checker</h1>
<form onsubmit="checkPw();return false;">
<input style="width:50%;" type="password" id="password"></input><br>
<input type="button" value="Check Password" onclick="checkPw()"></input><br>
</form>
<h2 id="output"></h2>
</center>
<script>
async function sha1(message) {
const msgBuffer = new TextEncoder('utf-8').encode(message)
const hashBuffer = await crypto.subtle.digest('SHA-1', msgBuffer)
const hashArray = Array.from(new Uint8Array(hashBuffer))
const hashHex = hashArray.map(b => ('00' + b.toString(16)).slice(-2)).join('')
return hashHex
}
async function getHashes(prefix) {
return fetch('https://api.pwnedpasswords.com/range/' + prefix).then((response) => {
return response.text()
})
}
async function checkPw() {
document.getElementById('output').innerHTML = ''
let pw = document.getElementById('password').value
if (pw === '') return
let hashedPw = await sha1(pw)
let prefix = hashedPw.slice(0, 5).toUpperCase()
let suffix = hashedPw.slice(5).toUpperCase()
let data = await getHashes(prefix)
let array = data.trim().split('\n')
array = array.map(item => {
let parts = item.split(':')
return {
suffix: parts[0].toUpperCase(),
count: parseInt(parts[1])
}
})
let matches = array.filter(item => item.suffix === suffix)
let count = matches[0] ? matches[0].count : 0
console.log('Hashes Length: ' + array.length)
console.log('Match Count: ' + count)
document.getElementById('output').innerHTML = 'Pwned Count: ' + count
}
window.onload = function() {
let match = document.location.href.match(/^([^#]+)#(.+)$/)
if (match) {
window.history.replaceState('name', '', match[1])
let pw = document.getElementById('password')
pw.value = match[2]
checkPw().then(() => {
let out = document.getElementById('output')
out.innerHTML = 'Password: "' + match[2] + '"<br>' + out.innerHTML
pw.value = ''
})
}
}
</script>
</body>
</html>