Follow for free plugins, new theme releases and theme news
Plugin Description
This plugin provides usable action based on the Dark Sources RESTful API service. The Dark Sources databases is the
worlds largest full disclosure collection of recovered stolen data reaching over 20 billion lines of credential and
person information over 3 billion identified individuals globally.
Action Triggers(note: any possible trigger will spawn alerts or actions):
-
Password exists for user in Dark Sources’s hacker database
This will trigger if the user’s e-mail address and the submitted password is known to be stolen.
-
Known password usage is in the top X
This will trigger if the passwords is ranked within the top X of known uses. A rank of 1 means it’s the password
most known to be used and stolen while a higher rank (currently 900m is top) will be more restrictive.
-
User has used the password at least X time(s) on other clean sites
This will trigger if the user has been seen X times using the submitted password by our cloud but has not been
recovered as known to be stolen.
-
Password used the password at least X time(s) on other clean sites
This will trigger if the password has been seen X times by our cloud with the last month but has not been
recovered as known to be stolen.
Triggered Actions – On login:
-
Force password change
Force the user to change their password
-
Popup alert to user
Alert the user upon login alerting to the risk with a custom generated popup message from our service or a
configured custom text message.
-
E-Mail alert to user
Send the user an e-mail upon login alerting to the risk with a custom generated message from our service or
a configured custom text message.
-
Send alert to admin
Send an e-mail alert to the admin logging a positive triggers and actions taken.
Triggered Actions – On password change (Front of site and user profile menu):
-
Reject password and alert user
Reject the submitted password and alert the user to the risk with a custom generated popup message from
our service or a configured custom text message.
-
E-Mail alert to user
Send the user an e-mail upon password change alerting to the risk with a custom generated message from our service
or a configured custom text message.
-
Send alert to admin
Send an e-mail alert to the admin logging a positive triggers and actions taken.
Screenshots
Configuration menu
