Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Password is marked as "insecure" even though it fits all the requirements. #1170

Open
AmeliaYeah opened this issue Dec 17, 2021 · 2 comments

Comments

@AmeliaYeah
Copy link

Expected Behavior

Upon signing up on the OWTF web interface, the password used (32 characters generated from a password manager with all possible characters) should be marked as secure and should allow me to create an account.

Current Behavior

I am essentially locked out of the site since any and all passwords (even if they logically fit the requirements to be deemed "secure") are denied and marked as "not secure".
For context, the generated passwords look like this: v5h^L7Qt%%^6x%ik62z7U$66uX62#&ys7^&@b!

Possible Solution

Unknown; I've tried manually going into the postgres database and creating an entry manually to bypass the register page. However, I'm unaware of the exact hashing algorithm used, and the "reset password" functionality probably would result in the same "insecure password" issue.

Steps to Reproduce (for bugs)

Ignore the "invalid email" thing at the start, I changed it later on in the screenshots and the email issue appears unrelated to the password issue

  1. Login Screen without password
  2. Login Screen with password
  3. Proof that 'confirm password' is not the issue
  4. Password Error
  5. Denied

Logs

The 'Invalid Salt' error might be due to my attempt at manually going into the PSQL database and adding an entry for myself manually. Though I'm not sure if it's on my end or if it is on the server code end.
ui_server.log

Your Environment

  • Installation method used: Docker-Compose
  • Version/branch used: 2.5.0
  • Operating System and version (like Kali, Debian, ArchLinux, etc): Kali docker container inside Parrot OS.
  • pip/setuptools version: Python3.9; Pip 20.3.4
  • sudo access: Am able to use root.
@officialarmannqureshi
Copy link

officialarmannqureshi commented Nov 17, 2023

Hi maintainers, I would like to work on this issue.
Please assign it to me.

@brunbennett
Copy link

any luck anyone? still cannot create account because password issues

@AleksaMCode AleksaMCode mentioned this issue Mar 20, 2024
7 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants