> ## Documentation Index
> Fetch the complete documentation index at: https://docs.specterops.io/llms.txt
> Use this file to discover all available pages before exploring further.

# test_password

> Tests a password against a user to see if it's valid via an API call

## Summary

Tests a password against a user to see if it's valid via an API call

* Needs Admin: False
* Version: 1
* Author: @its\_a\_feature\_

### Arguments

#### password

* Description: Password to test
* Required Value: True
* Default Value: None

#### username

* Description: Local user to test against
* Required Value: True
* Default Value: None

## Usage

### Without Popup

```
test_password username password
```

## MITRE ATT\&CK Mapping

* T1110

## Detailed Summary

Uses the OpenDirectory Framework to test a local username/password combination.

```javascript theme={null}
let session = $.ODSession.defaultSession;
let sessionType = 0x2201 // $.kODNodeTypeAuthentication
let recType = $.kODRecordTypeUsers 
let node = $.ODNode.nodeWithSessionTypeError(session, sessionType, $());
let user = node.recordWithRecordTypeNameAttributesError(recType,$(username), $(), $())
if(user.js !== undefined){
    if(user.verifyPasswordError($(password),$())){
        return {"user_output":"Successful authentication", "completed": true};
    }
    else{
        return {"user_output":"Failed authentication", "completed": true};
    }
}
```

When typing out on the commandline (instead of the popup), the username is the first word and the password is all the rest