Closed cmlh closed 6 years ago
Integration Pattern
Custom Entities
haveibeenpwned.Password
haveibeenpwned.linkAnalysis
returns [password] "Found" (for HTTP Status 200
) or [password] "Not Found" (for HTTP Status 400
)Entity Input Value(s)
haveibeenpwned.Password
maltego.Hash
SHA-1haveibeenpwned.Password
haveibeenpwned.Password
maltego.Hash
SHA-1Transforms
haveibeenpwned.Password
to maltego.Hash
SHA-1maltego.Hash
SHA-1 to haveibeenpwned.linkAnalysis
haveibeenpwned.Password
to haveibeenpwned.linkAnalysis
Machine
Serial Path
haveibeenpwned.Password
to haveibeenpwned.linkAnalysis
haveibeenpwned.Password
to maltego.Hash
SHA-1Serial Path
maltego.Hash
SHA-1 to haveibeenpwned.linkAnalysis
. For the machine, it can take 'haveibeenpwned.Password' as input and give out 'haveibeenpwned.linkAnalysis' and 'maltego.Hash' as first level of output. Then 'maltego.Hash' can be further used as input to get 'haveibeenpwned.linkAnalysis'. In most of the cases it will generate same result but there might be instances where only either one of them will.
@SudhanshuC
Yes, the input value ce0b2b771f7d468c0141918daea704e0e5ad45db of haveibeenpwned.Password
would also return a maltego-Hash
SHA-1 entity of ce0b2b771f7d468c0141918daea704e0e5ad45db too with the ?originalPasswordIsAHash=true
parameter which would link to the initial 'haveibeenpwned.Password` entity.
I have amended the [Maltego] Machine specified above.
Support
Pwned Passwords
API v2 endpoint.References
Implementation