DSInternals icon indicating copy to clipboard operation
DSInternals copied to clipboard

Test-PasswordQuality directly with SPLIT database from HIBP

Open gruppenrichtlinien opened this issue 1 year ago • 1 comments

Test-PasswordQuality and the parameter -WeakPasswordHashesSortedFile or -WeakPasswordHashesFile is using the single file, e.g. fom HIBP.

Actually I use two seperate versions of the HIBP File: Single and Split into 00000-FFFFF.txt, the SPLIT files are more performant, when checking how often the hash is in the breached list.

For Data Reduction reasons, it would be nice to have only the split version and a parameter like " -WeakPasswordHashesFilePath"

gruppenrichtlinien avatar Sep 13 '24 14:09 gruppenrichtlinien

Hello @gruppenrichtlinien , would you please be able to implement this feature?

MichaelGrafnetter avatar Sep 15 '24 09:09 MichaelGrafnetter

Sorry, I think it´s my problem in understanding.

The reason, why I use the split files is, not to get the count of compromised accounts in the AD. The reason to use the split is the faster search for the counter how often a specific NTLM hash is inside the database. An appearence of 10.000+ is much more faster to reset, than one with a count of 10.

the counter is inside the .txt files, seperated by ":"

If I search for the specific Hash in 30GB it took a long time ...

Thanks for adding the Parameter -WeakPasswordHashesSortedFilePath ! :-)

gruppenrichtlinien avatar Oct 29 '24 20:10 gruppenrichtlinien

Understood. It's implemented in #186.

aseigler avatar Oct 31 '24 01:10 aseigler

See release 4.15.

MichaelGrafnetter avatar Dec 23 '24 17:12 MichaelGrafnetter