[u534D]

Anybody want to talk about wordlists? Where to find the best wordlists? Short wordlists that work?

I put together a pretty big list with the skull security lists, crackstation, darkc0de, and some others. I have probably a couple hundred gigs of wordlists now but really I'm looking for shorter lists with better success rates? Anybody want to share?

Statistics? Any of you guys crack a lot of hashes and keep good statistics?

Anyway I wrote a palindrome generator today. So I'm writing out lists of palindromic strings if you are interested in that for research or whatever PM me. 🤝

[TechDon]

Amongst the large ones I have, I have a few tiny ones that I like to use.
You could combine these and clean them if you wish.


I have zipped, compressed and uploaded for you, here...
http://turbobit.net/krslv8n6dyjn.html

My experience of using these with a good rule has seen fairly good results.
🤝

[Forezza]

http://forum.insidepro.com/viewtopic.php?t=34331
https://wiki.skullsecurity.org/Passwords
http://packetstormsecurity.com/Crackers/wordlists/
http://www.hashkiller.co.uk/downloads.aspx
http://blog.g0tmi1k.com/2011/06/dictionaries-wordlists/
http://hashcrack.blogspot.de/p/wordlist-...ds_29.html
http://www.md5this.com/tools/wordlists.html
http://www.openwall.com/passwords/wordlists/
http://web.archive.org/web/2013060508235...passwords/

[chick3nman]

Honestly, I find larger wordlists don't really increase your ability to crack things(at least hashes, if you want this for account cracking completely disregard the rest of this). The thing that helps the most for me is really rules. I have a tiny little 25gb dictionary I built myself and @Crazyycast13 has seen my rule generator(Project Proton) in action. He can tell you how powerful the rules can really be. The rules that I have generated + my dictionary seem to be far better than any larger dictionary I've ever used/seen used. That doesn't mean increasing your dictionary size won't help, but at the point where the size of your dictionary starts getting so big that your attack is actually slower than a smaller dictionary with a lot of good rules, it will become less efficient to increase your dictionary size.

[crazyycast13]

Honestly, I find larger wordlists don't really increase your ability to crack things(at least hashes, if you want this for account cracking completely disregard the rest of this). The thing that helps the most for me is really rules. I have a tiny little 25gb dictionary I built myself and @Crazyycast13 has seen my rule generator(Project Proton) in action. He can tell you how powerful the rules can really be. The rules that I have generated + my dictionary seem to be far better than any larger dictionary I've ever used/seen used. That doesn't mean increasing your dictionary size won't help, but at the point where the size of your dictionary starts getting so big that your attack is actually slower than a smaller dictionary with a lot of good rules, it will become less efficient to increase your dictionary size.

It's ridiculous. It's not necessarily good against single hashes (yet) but against a massive database, it will crack like no other.

We have screenshared the thing a couple of times, and tbh, the crack rates are not funny, and scare me every time that he's going to be able to crack my hash.

[Tony S]

Honestly, I find larger wordlists don't really increase your ability to crack things(at least hashes, if you want this for account cracking completely disregard the rest of this). The thing that helps the most for me is really rules. I have a tiny little 25gb dictionary I built myself and @Crazyycast13 has seen my rule generator(Project Proton) in action. He can tell you how powerful the rules can really be. The rules that I have generated + my dictionary seem to be far better than any larger dictionary I've ever used/seen used. That doesn't mean increasing your dictionary size won't help, but at the point where the size of your dictionary starts getting so big that your attack is actually slower than a smaller dictionary with a lot of good rules, it will become less efficient to increase your dictionary size.

I prefer larger (high quality!) wordlists with smaller rules as opposed to tiny wordlists with massive rules.

I've been scraping everything I can find for keywords during the past few months. Social media websites, blogs, gaming forums, everything. I've optimized my cracking process loads, and I find that I have a much higher crack rate with large lists and a small rule as compared to a wordlists with absurdly big rules. There isn't any speed compromise either - in fact it's orders of magnitude faster.

Recently I've been talking with some of the most reputable members on the InsidePro forums, and to my surprise, they're exactly the same.

[crazyycast13]

I prefer larger (high quality!) wordlists with smaller rules as opposed to tiny wordlists with massive rules.

I've been scraping everything I can find for keywords during the past few months. Social media websites, blogs, gaming forums, everything. I've optimized my cracking process loads, and I find that I have a much higher crack rate with large lists and a small rule as compared to a wordlists with absurdly big rules. There isn't any speed compromise either - in fact it's orders of magnitude faster.

Recently I've been talking with some of the most reputable members on the InsidePro forums, and to my surprise, they're exactly the same.

Well, he just got a 99.xx% cracked from a database with 16k hashes.


He rips the hashes to shreds.

[chick3nman]

I prefer larger (high quality!) wordlists with smaller rules as opposed to tiny wordlists with massive rules.

I've been scraping everything I can find for keywords during the past few months. Social media websites, blogs, gaming forums, everything. I've optimized my cracking process loads, and I find that I have a much higher crack rate with large lists and a small rule as compared to a wordlists with absurdly big rules. There isn't any speed compromise either - in fact it's orders of magnitude faster.

Recently I've been talking with some of the most reputable members on the InsidePro forums, and to my surprise, they're exactly the same.

Don't get me wrong, a 1gb dict with infinite rules will never be as strong as a bigger dict with a few good rules. But a medium-larger dict with more advanced rules seems to do really really well when compared to a massive dict and very few basic rules. Also rule/dict quality comes into play. More rules is not as good as less INCLUSIVE rules. I score rules based on a number of factors, including previous cracks and grab the top 100 rules for my most basic attack. That seems to give me a really good success rate for general hash cracking. For more advanced attacks, I do switch dictionaries and rule sets but the total size of all my dicts combined is still only 25gb.

The speed difference I was talking about comes when you start to add rules to a massive dictionary. A smaller dictionary will yield a smaller, and possibly better keyspace for cracking human generated passwords when rules are applied. For every rule, you run the entire dictionary again so the larger the dictionary, the less ways you can mangle words the way people do before you run into an attack that takes days and days.

[u534D]

TechDon and Forezza thanks for sharing.

chick3nman would you like to share your rules?

Anyway I have downloaded about 1300 lists. Some of them are duplicates so I have some sorting to do.

I also generated a bunch of palindromes. 1-16 digit numeric, 7_char_all_ascii, 12 character alpha upper 12 lower. Still have to code for some of the other character combinations and rules.

My hypothesis on palindromes is that they are about half as secure as their asymetric counterparts. A 10 character palindromic string takes roughly the same number of tries as a 5 character asymetric string. The wordlist takes up slightly more space.

[Forezza]

I prefer larger (high quality!) wordlists with smaller rules as opposed to tiny wordlists with massive rules.

I've been scraping everything I can find for keywords during the past few months. Social media websites, blogs, gaming forums, everything. I've optimized my cracking process loads, and I find that I have a much higher crack rate with large lists and a small rule as compared to a wordlists with absurdly big rules. There isn't any speed compromise either - in fact it's orders of magnitude faster.

Recently I've been talking with some of the most reputable members on the InsidePro forums, and to my surprise, they're exactly the same.

Depends on what you define as large. I find that medium sized word lists with large rules work quite well. You'd also be surprised with the lack of usage of combo attacks on insidepro forums (using two small dictionaries) :P

[u534D]

Depends on what you define as large. I find that medium sized word lists with large rules work quite well. You'd also be surprised with the lack of usage of combo attacks on insidepro forums (using two small dictionaries) :P

I found a bunch of lists called inside pro. Same place? Is that a good haunt? I'm going to have to check that out.

[triggerhappeee]

what wordlist best works for facebook? thanks

[u534D]

I don't even use facebook. facebook is a waste of your life.

[Wrist]

I would like a wordlist with common words, no numbers or - words.

[Fajerfoks]

Thanks for wordlists guys :)