HaveIBeenPwned / PwnedPasswordsDownloader

A tool to download all Pwned Passwords hash ranges and save them offline so they can be used without a dependency on the k-anonymity API
BSD 3-Clause "New" or "Revised" License
701 stars 55 forks source link

What if you do not have NET at all #37

Closed jmcunx closed 1 year ago

jmcunx commented 1 year ago

is there a way to down load this data when none of my systems have NET6 or any verion of NET ?

Thanks

gorfou commented 1 year ago

Or, maybe this sounds completely out of this world, but I use Linux exclusively for the last 20 years. I know there's some support for it with with Mono, but a little platform agnosticism would have been appreciated here.

NocFlame commented 1 year ago

The "new" .Net plattform is Cross-platform, Open source and Free. No need for mono. Please have a look at https://dotnet.microsoft.com/en-us/download/

nelsonjchen commented 1 year ago

From a minor conversation on HN, @jmcunx is trying to run this on OpenBSD.

nelsonjchen commented 1 year ago

I think for some of us, we'll like to not have to install a pile of dependencies. For that, I think the shell script presented here:

https://github.com/HaveIBeenPwned/PwnedPasswordsDownloader/issues/30

should suffice.

jmcunx commented 1 year ago

Actually I already have pwned-passwords-sha1-ordered-by-hash-v8.7z, I pulled that before the download change a while ago.

I was hoping to find is a diff between that file and what is mentioned in this post:

https://www.troyhunt.com/seized-genesis-market-data-is-now-searchable-in-have-i-been-pwned-courtesy-of-the-fbi-and-operation-cookie-monster/

Note, OpenBSD does not support any version of NET, which is what I am on

TheSemicolons commented 1 year ago

@jmcunx Mono may be an option: https://www.mono-project.com/ 2023-04-07-181936_579x364_scrot

LauraRozier commented 1 year ago

Or, maybe this sounds completely out of this world, but I use Linux exclusively for the last 20 years. I know there's some support for it with with Mono, but a little platform agnosticism would have been appreciated here.

It is very platform agnostic, using .net6 which works on the main operating systems used by most people and administrators. If you need it on bsd this badly, just spin up a small VM with Linux and write a small interface between them.

Or good luck figuring out how to work with CloudFlare from the small amount of languages that do work on OpenBSD. Could try NodeJS.

A rewrite using puppeteer should be easy enough if your daily driver is an OpenBSD system ;)

troyhunt commented 1 year ago

Further, the API is completely platform agnostic. If you want to download all the data without using the official downloader, here's how to do it:

for 00000 to FFFFF download hash range file

You're welcome 🙂

jmcunx commented 1 year ago

Hi

This can be closed, I ended up using a Linux system to get the list.

After looking at the new file, I realized the diff would be as large as the main file :)

Anyways, thank for all the work done to maintain this list.

jmcunx commented 1 year ago

Hi

I just closed this issue.

After looking at the new file, I realized the diff would be as large as the main file :)

Anyways, thank for all the work done to maintain this list.

muzso commented 1 month ago

For people looking for a simple (just curl !) solution for HIBP password hash downloads: https://github.com/HaveIBeenPwned/PwnedPasswordsDownloader/issues/79