Skip to content

#237 Wrong Answer Section: Authentication Flaws Challenge: Password S… #72

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: develop
Choose a base branch
from
Open

#237 Wrong Answer Section: Authentication Flaws Challenge: Password S… #72

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 8 additions & 8 deletions password-strength/src/main/java/org/owasp/webgoat/plugin/PasswordStrength.java
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -60,20 +60,20 @@
public class PasswordStrength extends LessonAdapter
{
private Map<String, Password> passwords = new TreeMap<String, Password>() {{
put("pass1", new Password("123456", "seconds", "0", "dictionary based, in top 10 most used passwords"));
put("pass2", new Password("abzfezd", "seconds", "2", "26 chars on 7 positions, 8 billion possible combinations"));
put("pass3", new Password("a9z1ezd", "seconds", "19", "26 + 10 chars on 7 positions = 78 billion possible combinations"));
put("pass4", new Password("aB8fEzDq", "hours", "15", "26 + 26 + 10 chars on 8 positions = 218 trillion possible combinations"));
put("pass5", new Password("z8!E?7D$", "days", "20", "96 chars on 8 positions = 66 quintillion possible combinations"));
put("pass6", new Password("My1stPassword!:Redd", "quintillion years", "364", "96 chars on 19 positions = 46 undecillion possible combinations"));
put("pass1", new Password("123456", "seconds", "0", "Common password: In the top 5 most used passwords"));
put("pass2", new Password("abzfezd", "seconds", "0.2", "Possible a word"));
put("pass3", new Password("a9z1ezd", "seconds", "2", "Length short"));
put("pass4", new Password("aB8fEzDq", "hours", "2", "Length short"));
put("pass5", new Password("z8!E?7D$", "days", "2", "Length short"));
put("pass6", new Password("My1stPassword!:Redd", "quintillion years", "36", "Length long"));
}};

private class Password {

String password;
String timeUnit;
String answer;
private String explanation;
String explanation;

public Password(String password, String timeUnit, String answer, String explanation) {
this.password = password;
Expand Down
15 changes: 9 additions & 6 deletions ...ength/src/main/resources/plugin/PasswordStrength/lessonSolutions/en/PasswordStrength.html
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,11 +27,14 @@
Here are the results you get:<br><br>

Password = 123456: <font color="#ff0000">0</font> seconds<br>
Password = abzfezd: <font color="#ff0000">2</font> seconds<br>
Password = a9z1ezd: <font color="#ff0000">19</font> seconds<br>
Password = aB8fEzDq: <font color="#ff0000">15</font> hours<br>
Password = z8!E?7: <font color="#ff0000">20</font> days<br>
Password = My1stPassword!:Redd: <font color="#ff0000">364</font> quintillion years<br>
<br><br><br>
Password = abzfezd: <font color="#ff0000">0.2</font> seconds<br>
Password = a9z1ezd: <font color="#ff0000">2</font> seconds<br>
Password = aB8fEzDq: <font color="#ff0000">2</font> hours<br>
Password = z8!E?7D$: <font color="#ff0000">2</font> days<br>
Password = My1stPassword!:Redd: <font color="#ff0000">36</font> quintillion years<br>
<br>

<font size="2"><b>Important to note</b></font><br/>
It is possible that a password could be a dictionary word or a name. In the case of a name it might be easy to guess. If it's looks like a dictionary word it could be cracked very quickly.
</body>
</html>