etcshadow

Documentation

Overview

Package etcshadow implements a detector for weak/guessable passwords stored in /etc/shadow.

Index

• Variables
• type Cracker
  • func NewPasswordCracker() Cracker
• type Detector
  • func (Detector) Name() string
  • func (Detector) RequiredExtractors() []string
  • func (d Detector) Scan(ctx context.Context, scanRoot string, ix *inventoryindex.InventoryIndex) ([]*detector.Finding, error)
  • func (Detector) ScanFS(ctx context.Context, fs fs.FS, ix *inventoryindex.InventoryIndex) ([]*detector.Finding, error)
  • func (Detector) Version() int

Variables

var ErrNotCracked = errors.New("not cracked")

ErrNotCracked returned when a cracker did not find a matching password.

Types

type Cracker

type Cracker interface {
	// Crack returns (password,nil) on success and ("", ErrNotCracked) on failure.
	Crack(context.Context, string) (string, error)
}

Cracker interface is implemented by types which know how to crack hashes.

func NewPasswordCracker

func NewPasswordCracker() Cracker

NewPasswordCracker returns a cracker that can attempt to find the password for a given hash.

type Detector

type Detector struct{}

Detector is a SCALIBR Detector for weak/guessable passwords from /etc/shadow.

func (Detector) Name

func (Detector) Name() string

Name of the detector.

func (Detector) RequiredExtractors

func (Detector) RequiredExtractors() []string

RequiredExtractors returns an empty list as there are no dependencies.

func (Detector) Scan

func (d Detector) Scan(ctx context.Context, scanRoot string, ix *inventoryindex.InventoryIndex) ([]*detector.Finding, error)

Scan starts the scan.

func (Detector) ScanFS

func (Detector) ScanFS(ctx context.Context, fs fs.FS, ix *inventoryindex.InventoryIndex) ([]*detector.Finding, error)

ScanFS starts the scan from a pseudo-filesystem.

func (Detector) Version

func (Detector) Version() int

Version of the detector.