search

ravisorg / Mellt

A brute force password checker that returns a meaningful number describing the real world strength of your password
78 stars 24 forks source link

Every test case I throw at Mellt gives -1 #1

Closed withremote closed 12 years ago

withremote commented 12 years ago

I tried several test cases with upper lower and special characters, even banging on the keyboard, and every single response is -1, and I'm pretty sure the password test i am submitting are not in the common-passwords.txt.

ravisorg commented 12 years ago

I guess the first thing to check is if they actually are in common-passwords.txt (you might be surprised), but assuming they aren't please post some examples I can test with and I'll be happy to investigate.

withremote commented 12 years ago

SHWjkdj3i22 PW390-wsa! uj7y6jrthgo890u <- literally banging on the keyboard.

all -1. It is portions of the password that are found in the common passwords list that would be returning -1?

ravisorg commented 12 years ago

Interesting... I'm not seeing that at all:

SHWjkdj3i22 => 442586 days PW390-wsa! => 41761 days uj7y6jrthgo890u => 1000000000 days (the highest number Mellt will return)

There must be something about your system that's different from mine. Off the top of my head... What version of PHP are you running? 32 or 64 bit? Do you have the BC Math module installed (I would guess yes, otherwise you'd be getting lots of errors)? Anything else you can think of that might be unique (perhaps include the output from php --info)?

withremote commented 12 years ago

PHP Version 5.3.8, 64 bit BCMath support enabled

Running it inside a CodeIgniter site, but I'm just including it and not running it through the library loader...and i just figured it out, user error. Sorry for the trouble, it works great now.