From charlesreid1

Revision as of 08:01, 13 September 2016 by Admin (talk | contribs)

Experience so far with passwords:

One was a three word phrase (in full rockyou.txt)

Another one was the word "secret", or something or other (in common passwords/short password list)

Latest:

common word + 2 digits (another terrible one - top 1 mil pws, alleged gmail passwords, rockyou)

8 digits, first 6 prime numbers (this one is terrible - top 1 mil pws, alleged gmail, honeynet, md5decryptor, mil-dic, rockyou)

two names put together (in alleged gmail passwords)

Rules gathered from this:

  • Make good use of rockyou - it has EVERYTHING.
  • Certain numbers are more common, like 33. Certain words match certain patterns. Like, imnumber and a number
  • Numbers only - there are lots of numbers-only passwords that are patterns (most in rockyou, lots that are strange). These are basically THE lowest-hanging fruit.
  • Appended numbers - start with the easy ones. low-hanging fruit.