[Ex094]

May I present you my new database program, the Password Manager Version. It's an improved version from my previous VRD project. For me the VRD has very buggy code, Here are some of it's aditional features:

Features:
- Base64 encoded credentials
- Unix Based Authentication (Login to be precise)
- Less If statements
- Intro to Classes
- Better Error Handling
- Better Code (From VRD Point of View)
- Command Input (No menu)
- Linux Compatible Only (Sorry Windows Users, Read below for Why Windows is not supported)
- Python Version 3.3 Used

Glitch:
- The delete function with display "Credentials Deleted!" even if the username doesn't even exist. I'll be releasing a fix soon as it's not a big problem
- Clear function will not work for MAC Users

Commands Usage:

insert -- Insert credentials into the database

view -- View the credential database

delete -- Delete a credential based on username

search -- Search for a credential detail using Username

exit -- Quit program

Logging In:

In my password manager I've used PAM to simulate Unix Authentication which means that Linux users can log in using their account username and password. Because Windows doesn't use Unix auth, logging will give error and hence program will easily malfunction. I will include support If I find any windows related auth
module for Python.

Here's a screenshot of the Unix Auth:



The password that user will input will not be visible as I've used getpass() module as a part of security

Security:

Without using a encoding to enccode the credentials that a user enters, whats the point of making a password manager? It's always supposed to make the credentials for your eyes only. Well the most basic encoding there I could find was base64 so everything you enter gets encoded in base64 and then It gets stored in the database. When you fetch the results from the database, it gets decoded on it's way to the output. Well if you have a better encryption then you are welcome to suggest

I believe that I got confused between Encryption and Encoding, hence speaking of base64 it's not secure at all as deque said hence I'll be implementing another one in the upcoming version!

Please be sure to install Simple PAM module in your python module repo before using my program, you can get Simple PAM from:

Code:

https://github.com/leonnnn/python3-simplepam

Source Code:

Code:

import os, platform, base64, sqlite3, random, getpass from simplepam import authenticate class passmanager: def auth(username, password): #Unix Authentication using PAM if authenticate(username, password) == True: return 'pass' else: return 'fail' def encode(text): #Function to encrypt credentials details try: encoded = base64.b64encode(text.encode('utf8')) return encoded except TypeError: return "Wrong User Input" def decode(text): #Decodes the encrypted text after fetching credentials from database try: decoded = base64.b64decode(text) return decoded except TypeError: passmanager.clear() return "Wrong User Input" def checkdatabase(): #Function to check whether the database exists or not try: with open('db.sql'): pass except IOError: passmanager.createdatabase() def createdatabase(): #Create the Database con = sqlite3.connect("db.sql") cur = con.cursor() cur.execute(""" CREATE TABLE passdb (username, password, description, dork BOOL) """) cur.close() cur.close() def insert(username, password, description): #Insert Credentials into the database try: rand_id = random.randint(0, 1000) if username == '': username = 'Unknown-%d' % rand_id if password == '': password = 'Unknown-%d' % rand_id if description == '': description = 'Unknown-%d' % rand_id con = sqlite3.connect('db.sql') cur = con.cursor() cur.execute(""" INSERT INTO passdb (username, password, description) VALUES (?,?,?) """, (passmanager.encode(username), passmanager.encode(password), passmanager.encode(description))) con.commit() cur.close() cur.close() except sqlite3.OperationalError: print('Database error, Make sure your database exists!') input('Press any key to Continue...') passmanager.clear() def viewdb(): #View the whole credential Database try: string = ['Username:', 'Password:', 'Description:'] con = sqlite3.connect('db.sql') cur = con.cursor() cur.execute(""" SELECT * FROM passdb """) getdb = cur.fetchall() if len(getdb) == 0: print(' ') print('No Record Found!') print(' ') for items in getdb: print(' ') print("####################################") for i in range(len(string)): dec = passmanager.decode(items[i]).decode('utf8') print(string[i], dec) print("####################################") input('Press any key to continue') except sqlite3.OperationalError: print('Database error, Make sure your database exists!') input('Press any key to Continue...') def search(user): #Function to search for the credentials using the username try: string = ['Username:', 'Password:', 'Description:'] con = sqlite3.connect('db.sql') cur = con.cursor() da = passmanager.encode(user) cur.execute("""SELECT * FROM passdb WHERE username LIKE ?""", (da,)) find = cur.fetchall() if len(find) == 0: print(' ') print('No data Found') print(' ') con.commit() cur.close() cur.close() for terms in find: print(' ') print("####################################") for i in range(len(string)): dec = passmanager.decode(terms[i]).decode('utf8') print(string[i], dec) print("####################################") input('Press any key to continue...') except sqlite3.OperationalError: print('Database error, Make sure your database exists!') input('Press any key to Continue...') passmanager.clear() def delete(user): #Function to delete user from database da = passmanager.encode(user) con = sqlite3.connect('db.sql') cur = con.cursor() cur.execute("""DELETE FROM passdb WHERE username LIKE ?""", (da,)) con.commit() cur.close() cur.close() input('Credential deleted!, Press any key to continue!') def clear(): #Clear Screen os.system('clear') def menu(): #The main menu passmanager.checkdatabase() username = input('Enter your UNIX Username: ') password = getpass.getpass() if passmanager.auth(username, password) == 'pass': passmanager.clear() while True: print(""" ############################################################# # # # Password Manager V.1 # # A small python database program to organize your # # passwords # # # ############################################################# # By Ex094 Of Hackcommunity # # http://ex094.blogspot.com # Type Help to view commands #############################""") cmd = input('>>> ') if cmd == 'insert': passmanager.clear() username = input('Your username: ').strip() password = input('Your password: ').strip() description = input('Credential Description: ').strip() passmanager.insert(username, password, description) if cmd == 'search': passmanager.clear() user = input('Type the username to search in the database:') passmanager.search(user) if cmd == 'delete': passmanager.clear() user = input('Input your Credential Username: ').strip() passmanager.delete(user) if cmd == 'view': passmanager.clear() passmanager.viewdb() if cmd == 'help': passmanager.clear() print(""" Password Manager Version 1 Available Commands: ------------------- Command - Function insert Insert credentials into the database view View the credential database delete Delete a credential based on username search Search for a credential detail using Username exit Quit program Coded By Ex094 http://ex094.bogspot.com http://www.hackcommunity.com """) input('Press any key to continue...') if cmd == 'exit': break else: passmanager.clear() else: print('Sorry, Wrong Credentials') os.system('exit') passmanager.menu()

Compiled Download:

You can download the compiled source from here:

Code:

http://ex094.uhosti.com/py/

Encountered a bug? Report it in you comment!

Have Fun

Regards,
Ex094