crunchy

crunchy

Finds common flaws in passwords. Like cracklib, but written in Go.

Detects:

• ErrEmpty: Empty passwords
• ErrTooShort: Too short passwords
• ErrNoDigits: Password does not contain any digits
• ErrNoSymbols: Password does not contain any special characters
• ErrTooFewChars: Too few different characters, like "aabbccdd"
• ErrTooSystematic: Systematic passwords, like "abcdefgh" or "87654321"
• ErrDictionary: Passwords from a dictionary / wordlist
• ErrMangledDictionary: Mangled / reversed passwords, like "p@ssw0rd" or "drowssap"
• ErrHashedDictionary: Hashed dictionary words, like "5f4dcc3b5aa765d61d8327deb882cf99" (the md5sum of "password")
• ErrFoundHIBP: Optional hash checks against the haveibeenpwned.com database

Your system dictionaries from /usr/share/dict will be indexed. If no dictionaries were found, crunchy only relies on the regular sanity checks (ErrEmpty, ErrTooShort, ErrTooFewChars and ErrTooSystematic). On Ubuntu it is recommended to install the wordlists distributed with cracklib-runtime, on macOS you can install cracklib-words from brew. You could also install various other language dictionaries or wordlists, e.g. from skullsecurity.org.

crunchy uses the WagnerFischer algorithm to find mangled passwords in your dictionaries.

Installation

Make sure you have a working Go environment (Go 1.2 or higher is required). See the install instructions.

To install crunchy, simply run:

go get github.com/muesli/crunchy

Example

…

Custom Options

…