Patched test_password_vulnerability.py

test_password_vulnerability.py

@@ -0,0 +1,29 @@
+from hashlib import md5
+import time
+
+def demonstrate_md5_weakness():
+    # Example password
+    password = "test123"
+
+    # Current implementation (MD5)
+    start_time = time.time()
+    md5_hash = md5(password.encode('utf-8')).hexdigest()
+    md5_time = time.time() - start_time
+
+    print(f"Password: {password}")
+    print(f"MD5 Hash: {md5_hash}")
+    print(f"Time taken for MD5: {md5_time:.6f} seconds")
+    print("\nVulnerabilities:")
+    print("1. MD5 is fast (bad for password hashing): {:.2f} million hashes/second possible on modern hardware".format(1/md5_time/1000000))
+    print("2. No salt used: identical passwords produce identical hashes")
+    print("3. MD5 is cryptographically broken with known collisions")
+
+    # Demonstrate lack of salt problem
+    password2 = "test123"
+    md5_hash2 = md5(password2.encode('utf-8')).hexdigest()
+    print(f"\nSame password hashed again: {md5_hash2}")
+    print(f"Hashes match? {md5_hash == md5_hash2}")
+    print("This makes the hashes vulnerable to rainbow table attacks")
+
+if __name__ == "__main__":
+    demonstrate_md5_weakness()