Password / Word lists
来源:互联网 发布:刚进入金融行业 知乎 编辑:程序博客网 时间:2024/05/01 18:40
Brute force, even though it’s gotten so fast, is still a long way away from cracking long complex passwords. That’s were word lists come in handy. It’s usually the crackers first go-to solution, slam a word list against the hash, if that doesn’t work, try rainbow tables (if they happen to have the tables for that specific hash type), and then the full on brute force. Some would say those first two steps are reversed, and it really is the choice of the the person doing it and the word lists they have to work with.
Matt Weir and company created a cool tool that has the best of both worlds, Dictionary based Rainbow Tables with Dr-Crack, which you can find here:
http://reusablesec.googlepages.com/drcrack
But, back to the reason of this post, word lists. Where do you get them? Here are a couple of my favorite places in no particular order:
http://www.packetstormsecurity.org/Crackers/wordlists/
http://www.theargon.com/achilles/wordlists/
http://www.openwall.com/wordlists/
http://www.outpost9.com/files/WordLists.html
I like to keep 3 size word lists:
1. small and fast: usually based on the output of one of the tools i’m about to tell you about
2. medium: this is my custom list that I add passwords I find / crack and generally think are good to add. I’m pretty picky about what goes into this list
3. huge: any wordlist I come across gets added to this list, it gets sorted and uniqued and restored
Now the two tools that I like for the small list is are CeWL and wyd
CeWL – http://www.digininja.org/projects/cewl.php
Wyd – http://www.remote-exploit.org/codes_wyd.html
They have some very similar lists of features, your mileage may vary. But they basically parse files and web pages for words and generate password lists based on the words found.
- Password / Word lists
- Word Password Recovery Master
- Lists
- password
- password
- Password
- password
- Password
- PASSWORD
- Password
- Password
- Resolve and Remove "BAD PASSWORD: It is Based on a Dictionary Word "in Linux
- word
- word
- word
- word
- WORD
- word
- 终于被鄙视了!
- 字符串循环移位 - 编程珠玑的一道题
- Struts与Hibernate整合
- IRP概述
- 基于.Net Framework的N层分布式应用开发
- Password / Word lists
- 硬盘零磁道损坏的修复方法
- N!最后一位非0位的求法
- 文字列转换成数字形式
- Spring学习笔记:spring集成hibernate
- 几个移位的小例子
- The C10K problem翻译
- windows 2003,windows 7,windows xp 混装方法
- Effective C++学习3 条款03:尽可能使用const