-
Notifications
You must be signed in to change notification settings - Fork 2
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Feat/pre consumption/decrypt pdf #8
base: main
Are you sure you want to change the base?
Feat/pre consumption/decrypt pdf #8
Conversation
Relies on passwords.txt which the user has to fill/supply themselves, though it's prefilled with some of the most common passwords that have been found in various data dumps. No cracking is performed. The script will try them out one by one until one matches or it runs out of passwords to try. If the password is over a certain length, the script will output a subtle reminder with the character length and first and last character of the matched password. CAVEAT: the original document version will have no encryption afterwards, if that is important to you. Refer-to: https://en.wikipedia.org/wiki/List_of_the_most_common_passwords and other language variants Refer-to: https://github.com/tarraschk/richelieu Refer-to: https://nordpass.com/de/most-common-passwords-list/
less error prone
also makes some command substitutions obsolete, reducing surface for errors
instead of a single monolithic password.txt, now all *.pwd.txt files within the script will be concatenated together and tried out. This makes it easier to add new lists. The file 'personal.pwd.txt' is reserved for the user's true passwords and guarded via .gitignore.
e.g. constant use of curly braces and quoting for variables, capitalization of names of code variables, constants, environment variables, etc. also linting via SpellCheck Refer-to: https://google.github.io/styleguide/shellguide.html Refer-to: https://www.shellcheck.net/
skips as much of the script logic as possible for these cases
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thank you very much for your contribution. I've reviewed your changes and they just need some small adjustments. After that, I'm happy to merge your PR.
cb9c758
to
aba43f2
Compare
Markdown was also linted
aba43f2
to
98de906
Compare
* **personal.pwd.txt** is slated for your personal passwords, it's also added to the local _.gitignore_ file | ||
* **insecure.pwd.txt** contains some of the most prolific passwords I could find | ||
* you can create other files in the same manner to try passwords from dumps, "most common password in XXX" lists etc. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I've checked out your code and ran mkdocs serve
pre-consumption bash script for paperless-ngx to strip encryption with a known password from pdfs you're consuming. No cracking involved.