Question

PYTHON

1.Guessing many passwords: Write a function called guess_passwords. It doesn't take any arguments. It should use the function guess, trying out as many possible passwords as possible. Here are some methods you might try:

• Try out a hardcoded list of strings that you think people might use as passwords.
• Try out all words in the word file.
• Try out all character combinations of length 4 or less (or more if you don't mind waiting).
• Try out combinations of words and numbers.
• Try out capitalized versions of any of the above

For full credit, you must try out at least three approaches, such as those listed above

2.Guessing one password: write a function called guess that takes a string (a guessed password) as an argument and prints out matching information if its encrypted string matches any of the strings in the encrypted password file. When you write the function, you may hardcode the name of the password file.

Here is an example run:

   >>> guess("blue")
   Found match: blue
   Line number: 1
   Encrypted value: 16477688c0e00699c6cfa4497a3612d7e83c532062b64b250fed8908128ed548

Answer 1

The required python script (guesspass.py):

import hashlib
import itertools

def guess_passwords():
  
   # 1. Hardcoded List approach
   # Make a list of possible passwords
   hardcoded_list = ["abcdefgh","abc1234","12345678","password","abcd123"]
   # Iterate through the list and guess each password
   for password in hardcoded_list:
       guess(password)

   # 2. Word file approach
   # Open file containing possible passwords (words.txt for example)
   file = open("words.txt","r")
   # Read through and make a file_words_list by splitting at a new line
   file_words_list = file.read().splitlines()
   # Iterate through the list and guess each password
   for password in file_words_list:
       guess(password)
   file.close()

   # 3. Four character length combinations
   # Make a list of possible character values in each password
   characters = ['!','@','#','$','%','^','&','*','(',')',':','[',']','a', 'b', 'c', 'd', 'e', 'f', 'g', 'h', 'i', 'j', 'k', 'l', 'm', 'n', 'o', 'p', 'q', 'r', 's', 't', 'u', 'v', 'w', 'x', 'y', 'z']
   # The itertools library provides a function which returns all possible combinations of a particular size from a list
   password_4len_list = [''.join(i) for i in itertools.product(characters,repeat=4)]
   # Iterate through the list and guess each password
   for password in password_4len_list:
       guess(password)

   # 4. Capitalized version approach for the hardcoded list, word file and all 4 character combinations
   # Open file containing words
   file = open("words.txt","r")
   # Make a word list out of it by splitting at new lines
   file_words_list = file.read().splitlines()
   # .upper() returns the upper cased string. Call it each for hardcoded, file and combinations list
   for password in hardcoded_list:
       guess(password.upper())
   for password in file_words_list:
       guess(password.upper())
   for password in password_4len_list:
       guess(password.upper())

def guess(guessed_password):
   # Generate the SHA256 Hash of the guessed password
   encrypted_guessed_password = hashlib.sha256(guessed_password).hexdigest()
   # Open the encrypted passwords file and create a list by splitting at each line
   file = open("encrypted_passwords.txt","r")
   encryted_passwords = file.read().splitlines()
   # Get no of lines in the files using length of list
   number_of_passwords = len(encryted_passwords)
   # Iterate through each password (each line in the encrypted passwords file)
   for i in range(number_of_passwords):
       # If match found...
       if encryted_passwords[i] == encrypted_guessed_password:
           print("Found match: "+guessed_password)
           print("Line number: "+str(i+1)) # Line number is index (i) + 1
           print("Encrypted value: "+encrypted_guessed_password)
   file.close()

if __name__ == "__main__":
   # If the python script is run, call guess_passwords()
   guess_passwords()

Sample "words.txt":

abc123
12345678
password

Sample "encrypted_passwords.txt"

16477688c0e00699c6cfa4497a3612d7e83c532062b64b250fed8908128ed548
983487d9c4b7451b0e7d282114470d3a0ad50dc5e554971a4d1cda04acde670b
e9cee71ab932fde863338d08be4de9dfe39ea049bdafb342ce659ec5450b69ae
03ac674216f3e15c761ee1a5e255f067953623c8b388b4459e13f978d7c846f4

Note: The lines in encrypted_passwords.txt correspond to the actual passwords "blue","abcd123","abcd1234" and "1234"

To run this: python guesspass.py

Sample Output:

Found match: abcd123
Line number: 2
Encrypted value: 983487d9c4b7451b0e7d282114470d3a0ad50dc5e554971a4d1cda04acde670b
Found match: blue
Line number: 1
Encrypted value: 16477688c0e00699c6cfa4497a3612d7e83c532062b64b250fed8908128ed548

Thank you.