PassTek

PassTek is a Go program that analyzes password policy and provides various statistics about it.

Features

• Passwords stats

  • Lengths
  • Complexity levels
  • Patterns
  • Occurrences
  • Password reuse
  • Usage of LanManager
  • Username as password

• Visualize data with pie

• Export reports in multiple formats

• Templating and multi-language support

Input Format

• Password file: one password per line
• Hash file: username:rid:lmhash:nthash

Output Options

The program can output the results in different formats, including:

• HTML report (.html): interactive visual charts (via ECharts)

• Excel spreadsheet (.xlsx): organized sheets with stats and charts

• Screenshot (.png): screenshot of all pie charts

- PDF (`.pdf`): pdf version of the html report

• Plain text (.txt): raw statistics and summaries

  === Hash analysis ===
  Total            : 1000
  Cracked          : 580
  Unique           : 698
  Reuse            : 302
  Lan Manager      : 230
  Empty            : 30
  User as password : 5
  
  === Password Length ===
  7 characters or fewer   : 408
  8 characters            : 99
  9 characters            : 45
  10 characters           : 20
  More than 10 characters : 8
  
  === Password Complexity ===
  One category used     : 44
  Two categories used   : 177
  Three categories used : 268
  Four categories used  : 91
  
  === Most Common Keywords ===
  cyber      : 27
  spring     : 24
  purpl      : 22
  omega      : 21
  pixel      : 21
  
  === Most Common Patterns === (l = Lowercase, u = Uppercase, d = Digit, s = Special)
  ulllll        : 34
  llllll        : 28
  llllld        : 24
  ullllld       : 21
  ullllll       : 16
  
  === Most Reused Passwords ===
  cipher        : 8
  @ur0r@#1      : 8
  Purpl35       : 8
  Delta@661     : 8
  0r10n6        : 7
  

How to Use

To build:

git clone https://github.com/sysdream/PassTek.git
cd PassTek
go build cmd/PassTek.go

Command example:

./PassTek -p passwords.txt -H hashes.txt -L logo_sysdream.png -cL logo_client.png -o all -l en

Options

  -H string
        Hash file (username:rid:lmhash:nthash:::)
  -L string
        Company logo file (png) (default "img/logo_sysdream.png")
  -anon
        Anonymize passwords (show first 2 and last 2 characters)
  -cL string
        Client logo file (png)
  -f string
        Output types (text, html, excel, screenshot, all) (default "all")
  -l string
        Output language (en,fr) (default "fr")
  -min int
        Minimum number of characters to be considered as an occurrence (default 5)
  -o string
        Output directory (default "output")
  -p string
        Password file (one per line)
  -top int
        Top N entries to display in charts and tables (default 5)

TODO

• Refactor the codebase for better structure and maintainability
• Embed all static and template files for better portability
• Rethink templating on language files (json) to make text editing easier for HTML and PDF reports.

License

This project is licensed under the MIT License.

Made with 🍉 by leco