dmp 0.1.5 → 0.2.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 46a098dc9f8eb855a74af2e91abdf35b13885bf41be8ca89c5a94ec813878726
-  data.tar.gz: 4d5d03eedb5193dc8f6fe279b684cab8c51be07062028db3ce73679d57f3f337
+  metadata.gz: 865f8aedf90a4845b1d04cd7343874c142d7241742844afe889d91fac254f78f
+  data.tar.gz: ec33e3320f9784754bc753a9fbd93c86169bfae4819b2fdefad85cddde726601
 SHA512:
-  metadata.gz: 61892dda3dc33a8241225b9bb04753871c4947bc07b93724af38af01c0dd217775923de8dd8d0ef2c533894090b564fc55dac875c8356ccd09ef4ed839a4ecf5
-  data.tar.gz: be47c2b049fdbabfee69f2fc4d77918280917abd7a7c9f8e0cdcdbd4a3c40fd97e4d1f4134a727f6e7cb64eebf4f9cc3bc4a89bec1f5d8b8e23737864ed2c78c
+  metadata.gz: f99340d8d3aa4a21a2d2f3d4a16eb169917afc23bceb4b687d581bd5ce23d875123d4bb89050ed13b56327a9cb4a809e98dc823dbbdf273fdab1f3674713406a
+  data.tar.gz: d4ce23d7523c434d1715ae5db14d2b5efd12f6d1f45052b8479592ee9a0a55aa5e406c538897e539cdd111a895a76fc73c08254420fdfb148fe8b03753165218

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    dmp (0.1.5)
+    dmp (0.2.1)
       clipboard (~> 1.1)
       colorize (~> 0.8)
       thor (~> 0)

data/lib/dmp.rb

@@ -1,4 +1,6 @@
 require 'dmp/version'
+require 'net/http'
+require 'digest/sha1'
 
 # Module to manage DMP operations
 module Dmp
@@ -14,4 +16,23 @@ module Dmp
     random_pass = pass_list.shuffle[0...pass_length]
     random_pass
   end
+
+  def self.check_pwned(passphrase)
+    if passphrase.kind_of?(Array)
+      passphrase = passphrase.join(' ')
+    end
+
+    hex_pass = Digest::SHA1.hexdigest(passphrase)
+    hex_pass_sample = hex_pass[0...5]
+    hex_pass_rest = hex_pass[5..-1]
+
+    # request a sample to HIBP to avoid disclosing the full pwd
+    uri = URI("https://api.pwnedpasswords.com/range/#{hex_pass_sample}")
+    req = Net::HTTP.get(uri)
+
+    clean_list = req.split("\r\n")
+    pass_list = clean_list.map { |hash| hash.split(':') }
+    pass_hash = Hash[*pass_list.flatten!]
+    pass_hash[hex_pass_rest.upcase]
+  end
 end

data/lib/dmp/cli.rb

@@ -12,11 +12,23 @@ module Dmp
                   aliases: '-c',
                   type: :boolean,
                   desc: 'Copy passphrase to clipboard.'
+    method_option :hibp,
+                  aliases: '-H',
+                  type: :boolean,
+                  desc: 'Check if passphrase is vulnerable in HIBP database.'
     def gen_pass(pass_length = 7)
       # Generate colored passphrase
       passphrase = Dmp.gen_passphrase(pass_length.to_i)
 
       # if flag clipboard is 'true' then copy passphrase to clipboard
+      if options[:clipboard]
+        Clipboard.copy(passphrase.join(' '))
+      end
+
+      # if flag hibp is 'true' then alert the user
+      if options[:hibp]
+        vuln_count = Dmp.check_pwned(passphrase)
+      end
 
       # colors array will be used to pick a randomized sample
       # removing black cause it looks ugly in terminals
@@ -28,9 +40,23 @@ module Dmp
         phrase.colorize(rand_color)
       end
       puts '- Passphrase: '.bold + passphrase.join(' ')
-      if options[:clipboard]
-        Clipboard.copy(passphrase.join(' '))
-        puts '- Copied to clipboard.'.bold.green
+      puts '- Copied to clipboard.'.bold.green if options[:clipboard]
+      if vuln_count
+        puts "- WARNING: Passphrase vulnerable #{vuln_count} times!".red.bold
+      elsif options[:hibp]
+        puts '- Password is safe to use.'.green.bold
+      end
+    end
+
+    desc 'check', 'Check if a password/passphrase is vulnerable.'
+    def check_pass
+      puts 'Enter your password, press ENTER when you\'re done.'
+      password = ask('Password (hidden):'.yellow, echo: false)
+      vuln_count = Dmp.check_pwned(password)
+      if vuln_count
+        puts " Your password appears in #{vuln_count} data sets!".red.bold
+      else
+        puts " Your password/passphrase is safe to use.".green.bold
       end
     end
 

data/lib/dmp/version.rb

@@ -1,5 +1,5 @@
 module Dmp
-  VERSION = "0.1.5"
+  VERSION = "0.2.1"
   BANNER = '''
  ____    __  __   ____  
 |  _ \  |  \/  | |  _ \ 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dmp
 version: !ruby/object:Gem::Version
-  version: 0.1.5
+  version: 0.2.1
 platform: ruby
 authors:
 - Franccesco Orozco