rmbolger / pwnedpasscheck Goto Github PK

Hello Friend! How can I check a lot of hashes from AD? for example by unloading all hashes from AD into "test.txt" and then check this file using your script? Please show an example if it possible.

Good evening,

I wanted to ask for a clarification/usage question since I think this sort of example might be missing from the README.

After running a few tests of the Test-PwnedPassword function, it appears to always return the Hash and Count values (so it can't be used as a boolean test).

Is the intention for usage to be that users check the Count value in each response value and if that is 0 then that would be the indicator as to whether or not a password is in the pwned password list?

That's my interpretation of things at the moment, so if that is the case, I just wanted to suggest that maybe an example showing a pwned vs. not pwned password check might be handy for new users of your module :-)!

Thank you!

Particularly for the NTLM case, it may be easier for people to host a copy of the API files directly on the local filesystem rather than hosted on a web server. It would be nice if ApiRoot could be a file path in addition to a URL.