passwords

Using wget to download a file from a password protected link

限于喜欢 提交于 2019-12-05 01:53:08
问题 I am trying to use wget to download a file from a http link that is password protected. I am using the following syntax: wget --http-user=user --http-password=xxxxxx http://...... Am I using the right syntax? Should user and password be surrounded by quotes or double quotes? 回答1: I did this a few years ago and luckily found the script in a backup I still have. I remember it was a two-stage process. The first step is to get and store the cookie(s): wget --keep-session-cookies --save-cookies

Java AES with CBC using passphrase

孤街醉人 提交于 2019-12-05 01:27:57
问题 I want to implement 256 key AES with CBC encryption with Java. Recipient sent me 256 bit passphrase as a String 'absnfjtyrufjdngjvhfgksdfrtifghkv' and it perfectly works using this openssl command: echo test | openssl enc -aes-256-cbc -a -k 'absnfjtyrufjdngjvhfgksdfrtifghkv' The output in base64 format is : U2FsdGVkX1/yA4J8T+i1M3IZS+TO/V29rBJNl2P88oI= When i decript it, it returns original input string : echo U2FsdGVkX1/yA4J8T+i1M3IZS+TO/V29rBJNl2P88oI= | openssl enc -d -aes-256-cbc -a -k

Regex match a strong password with two or more special characters

最后都变了- 提交于 2019-12-05 01:20:45
I need to regex match a password field using javascript with the following requirements: At least 15 characters two or more lower case letters two or more upper case letters two or more digits two or more of the following special characters: !@#$%^&*- I have a regex that takes care of MOST cases: /^.*(?=.{15,})(?=.{2,}\d)(?=.{2,}[a-z])(?=.{2,}[A-Z])(?=.{2,}[\!\@\#\$\%\^\&\*\-]).*$/ The problem here is with the symbols, it works with: P@ssw0rdP@ssw0rd Pssw0rdPssw0rd@@ Pssw0rd@@Pssw0rd But not: @@Pssw0rdPssw0rd I have a random password generator set up to exhaustively test this, so any ideas are

Capistrano 3 deploy asking for SSH passphrase but cannot type it in

。_饼干妹妹 提交于 2019-12-05 01:19:48
I'm trying to use Capistrano 3 to deploy a Rails 4 application. #config valid only for Capistrano 3.1 lock '3.1.0' set :application, 'testapp' set :scm, :git set :repo_url, 'git@bitbucket.org:sergiotapia/testapp.git' set :user, "deploy" # The user on the VPS server. set :password, "hunter2$$" set :use_sudo, false set :deploy_to, "/home/deploy/www/testapp" set :deploy_via, :remote_cache set :pty, true set :format, :pretty set :keep_releases, 1 set :rails_env, "production" set :migrate_target, :latest namespace :deploy do desc 'Restart application' task :restart do on roles(:app), in: :sequence,

Custom PHP function to verify correct password in Joomla

拟墨画扇 提交于 2019-12-05 00:59:28
问题 I created a script outside of Joomla that can successfully generate a Joomla password: // I copied the JUserHelper class from Joomla here $salt = JUserHelper::genRandomPassword(32); $crypt = JUserHelper::getCryptedPassword($password, $salt); $psw = $crypt.':'.$salt; My question is, how can I compare this new crypt:salt I generate above to a password of an existing user in the Joomla database, and know if the password supplied to the script above is the correct password for that user in the

How can you test if an AD password will meet configured complexity requirements?

我的梦境 提交于 2019-12-05 00:50:39
In a net 3.5 csharp application I need to know in advance if an AD password will meet configured complexity requirements. How can you do that? These links may point you in the right track: Change user password in ADS and check the domain password policy (C#)? User Management with Active Directory—Managing Passwords for ADAM Users Determining Domain-Wide Account Policies (this one appears to have what you need) If you want to fetch the requirements from AD, then the links in @Leniel Macaferi's answer should help. If you already know the expected requirements and your app is accepting the

Sql Server 2005: what data type to use to store passwords hashed by SHA-256 algorithm?

Deadly 提交于 2019-12-05 00:35:15
In Sql Server 2005 what data type should be used to store passwords hashed by SHA-256 algorithm ? The data is hashed by the application and passed to the database I prefer to convert the hash-Code to an Hex-String in this case a varchar(64) will do the trick or an varchar (66) if you like a " 0x "-prefix. In this way it is much easier to compare manually or (re)set values you have to copy/paste from other places. e.g you lost your admin-PW and want to reset it via SQL... The "Hash" attribute of the SHA256Managed class is an array of bytes, and HashSize is 256 bits, so I believe a binary(32)

Checking password complexity: different from last X passwords

不羁岁月 提交于 2019-12-04 23:29:57
问题 Most services, programs, etc. have various password complexity checks. Without delving into the efficacy of such checks, I thought of one that might be interesting, but also potentially problematic check: "The new password must be Y characters different from the last X passwords." This would prevent people from using passwords like Password1! , Password2! , and so on. But if that's done, one cannot hash the previously used password - they would be at best encrypted... Right? For a small Y and

Is Md5 Encryption Symmetric or Asymmetric?

拟墨画扇 提交于 2019-12-04 23:20:19
问题 For my iPhone application, Apple wants to know if my password encryption (md5) is greater then 64-bit symmetric or greater then 1024-bit symmetric. I have not been able to find it online, so I am wondering if anyone knows the answer. In addition, is this considered an appropriate encryption technology for passwords, or should I use something different? Thanks for any help! 回答1: MD5 is a hashing function, thus by definition it is not reversible. This is not the case for encryption (either

General Password Security && Implementation in Actionscript 3

只谈情不闲聊 提交于 2019-12-04 23:14:22
My project for this summer is to make a multiplayer online flash game. I could use some advice as I've never implemented a secure login system before, let alone done so in Actionscript. My setup right now is a .swf sending/receiving game data to/from a Java server which communicates with a MySQL database about account info. 1) How should I proceed in general? I was thinking that maybe I should have my .swf encrypt the password, send it, (have my server encrypt it again?), then store it in the database. 2) I'm sure I can find plenty of guides to encryption in Java. Can anyone recommend an