Difference between revisions of "Passwords"

From SkullSecurity
Jump to navigation Jump to search
Line 1: Line 1:
Cain's password list, fairly big and covers a lot: [http://downloads.skullsecurity.org/passwords/List-cain.txt.bz2 List-cain.txt]
==Password dictionaries==
These are dictionaries that come with tools/worms/etc, designed for cracking passwords. As far as I know, I'm not breaking any licensing agreements by mirroring them with credit; if you don't want me to host one of these files, let me know and I'll remove it.


John's password list, much smaller and more targeted/efficient: [http://downloads.skullsecurity.org/passwords/List-john.txt.bz2 List-john.txt]
<tr>
<td>Name</td>
<td>Compressed</td>
<td>Uncompressed</td>
<td>Notes</td>
</tr>
<tr>
<td>[http://www.oxid.it/cain.html Cain & Able]</td>
<td>[http://downloads.skullsecurity.org/passwords/List-cain.txt.bz2 List-cain.txt.bz2] 1,069,968 bytes</td>
<td>[http://downloads.skullsecurity.org/passwords/List-cain.txt List-cain.txt] 3,149,586 bytes</td>
<td>Fairly comprehensive</td>
</tr>
<tr>
<td>[http://www.openwall.com/john/ John the Ripper]</td>
<td>[http://downloads.skullsecurity.org/passwords/List-john.txt.bz2 List-john.txt.bz2] 10,934 bytes</td>
<td>[http://downloads.skullsecurity.org/passwords/List-john.txt List-john.txt] 21,935 bytes</td>
<td>Simple, designed to be modified</td>
</tr>


List of passwords stolen from MySpace (not by me!), covers most common modern passwords: [http://downloads.skullsecurity.org/passwords/List-myspace.txt.bz2 List-myspace.txt]
<tr>
<td>Conficker worm</td>
<td>[http://downloads.skullsecurity.org/passwords/Connficker.txt.bz2 Conficker.txt.bz2] 1411 bytes</td>
<td>[http://downloads.skullsecurity.org/passwords/Connficker.txt Conficker.txt] 702 bytes</td>
<td>Used by conficker worm to spread</td>
</tr>


List of passwords stolen from MySpace with associated counts (not useful for bruteforcing, but great for studying):
==Leaked passwords==
[http://downloads.skullsecurity.org/passwords/Myspace-counts.txt.bz2 Myspace-counts.txt]
Passwords that were leaked or stolen from sites. I'm hosting them because it seems like nobody else does.


List of passwords stolen from MySpace (not by me!), covers most common modern passwords: [http://downloads.skullsecurity.org/passwords/List-myspace.txt.bz2 List-myspace.txt]
List of passwords stolen from MySpace with associated counts (not useful for bruteforcing, but great for studying): [http://downloads.skullsecurity.org/passwords/Myspace-counts.txt.bz2 Myspace-counts.txt]
List of passwords stolen from PHPBB (not by me!), covers most easy to crack modern passwords: [http://downloads.skullsecurity.org/passwords/List-phpbb.txt.bz2 List-phpbb.txt]
List of passwords stolen from PHPBB (not by me!), covers most easy to crack modern passwords: [http://downloads.skullsecurity.org/passwords/List-phpbb.txt.bz2 List-phpbb.txt]
List of passwords stolen from PHPBB with associated counts (not useful for bruteforcing, but great for studying): [http://downloads.skullsecurity.org/passwords/Phpbb-counts.txt.bz2 Phpbb-counts.txt]
List of passwords stolen from PHPBB with associated counts (not useful for bruteforcing, but great for studying): [http://downloads.skullsecurity.org/passwords/Phpbb-counts.txt.bz2 Phpbb-counts.txt]
 
Rockyou leaked passwords (32 million passwords) -- LARGE download (150mb+) -- thanks to Mark Baggett for the list:
List of "500 worst passwords of all time", from [http://www.whatsmypass.com/?p=415 this story]: [http://downloads.skullsecurity.org/passwords/500-worst-passwords.txt.bz2 500-worst-passwords.txt]
* Ordered by commonness: [http://downloads.skullsecurity.org/passwords/rockyou-unique-bycount.txt.bz2 rockyou-unique-bycount.txt]
* With associated counts: [http://downloads.skullsecurity.org/passwords/rockyou-unique-withcount.txt.bz2 rockyou-unique-withcount.txt]
* Original list: [http://downloads.skullsecurity.org/passwords/rockyou-full.txt.bz2 rockyou-full.txt]


All English words: [http://downloads.skullsecurity.org/passwords/English.txt.bz2 English.txt]
All English words: [http://downloads.skullsecurity.org/passwords/English.txt.bz2 English.txt]
Another English word file, helpfully provided by BlackFrog: [http://downloads.skullsecurity.org/passwords/English2.txt.bz2 English2.txt]
Another English word file, helpfully provided by BlackFrog: [http://downloads.skullsecurity.org/passwords/English2.txt.bz2 English2.txt]
The password list used by the Conficker worm: [http://downloads.skullsecurity.org/passwords/Connficker.txt.bz2 Conficker.txt]
A German password list, ordered by length and then alphabetically. It's released under GPL (is that even valid? whatever), so I left the header intact -- make sure you remove it if you don't want to try the lines as passwords: [http://downloads.skullsecurity.org/passwords/German_list.txt.bz2 German_list.txt]
A German password list, ordered by length and then alphabetically. It's released under GPL (is that even valid? whatever), so I left the header intact -- make sure you remove it if you don't want to try the lines as passwords: [http://downloads.skullsecurity.org/passwords/German_list.txt.bz2 German_list.txt]
List of American cities, generated by [http://ha.ckers.org/blog/20090417/us-cities-dictionary/ RSnake]: [http://downloads.skullsecurity.org/passwords/US_Cities.txt.bz2 US_Cities.txt]
List of American cities, generated by [http://ha.ckers.org/blog/20090417/us-cities-dictionary/ RSnake]: [http://downloads.skullsecurity.org/passwords/US_Cities.txt.bz2 US_Cities.txt]


Rockyou leaked passwords (32 million passwords) -- LARGE download (150mb+) -- thanks to Mark Baggett for the list:
List of "500 worst passwords of all time", from [http://www.whatsmypass.com/?p=415 this story]: [http://downloads.skullsecurity.org/passwords/500-worst-passwords.txt.bz2 500-worst-passwords.txt]
* Ordered by commonness: [http://downloads.skullsecurity.org/passwords/rockyou-unique-bycount.txt.bz2 rockyou-unique-bycount.txt]
* With associated counts: [http://downloads.skullsecurity.org/passwords/rockyou-unique-withcount.txt.bz2 rockyou-unique-withcount.txt]
* Original list: [http://downloads.skullsecurity.org/passwords/rockyou-full.txt.bz2 rockyou-full.txt]

Revision as of 14:57, 2 March 2010

Password dictionaries

These are dictionaries that come with tools/worms/etc, designed for cracking passwords. As far as I know, I'm not breaking any licensing agreements by mirroring them with credit; if you don't want me to host one of these files, let me know and I'll remove it.

Name Compressed Uncompressed Notes Cain & Able List-cain.txt.bz2 1,069,968 bytes List-cain.txt 3,149,586 bytes Fairly comprehensive John the Ripper List-john.txt.bz2 10,934 bytes List-john.txt 21,935 bytes Simple, designed to be modified Conficker worm Conficker.txt.bz2 1411 bytes Conficker.txt 702 bytes Used by conficker worm to spread

Leaked passwords

Passwords that were leaked or stolen from sites. I'm hosting them because it seems like nobody else does.

List of passwords stolen from MySpace (not by me!), covers most common modern passwords: List-myspace.txt List of passwords stolen from MySpace with associated counts (not useful for bruteforcing, but great for studying): Myspace-counts.txt List of passwords stolen from PHPBB (not by me!), covers most easy to crack modern passwords: List-phpbb.txt List of passwords stolen from PHPBB with associated counts (not useful for bruteforcing, but great for studying): Phpbb-counts.txt Rockyou leaked passwords (32 million passwords) -- LARGE download (150mb+) -- thanks to Mark Baggett for the list:

All English words: English.txt Another English word file, helpfully provided by BlackFrog: English2.txt A German password list, ordered by length and then alphabetically. It's released under GPL (is that even valid? whatever), so I left the header intact -- make sure you remove it if you don't want to try the lines as passwords: German_list.txt List of American cities, generated by RSnake: US_Cities.txt

List of "500 worst passwords of all time", from this story: 500-worst-passwords.txt