Difference between revisions of "Passwords"

From SkullSecurity
Jump to navigation Jump to search
Line 2: Line 2:
These are dictionaries that come with tools/worms/etc, designed for cracking passwords. As far as I know, I'm not breaking any licensing agreements by mirroring them with credit; if you don't want me to host one of these files, let me know and I'll remove it.
These are dictionaries that come with tools/worms/etc, designed for cracking passwords. As far as I know, I'm not breaking any licensing agreements by mirroring them with credit; if you don't want me to host one of these files, let me know and I'll remove it.


<table style='border-width: 1px; border-spacing: 2px; color: #c0c0c0;'>
<table style='border-width: 1px; border-spacing: 2px; border-color: gray; border-style: outset; border-collapse: separate; color: #c0c0c0;'>
  <tr>
  <tr>
   <td width='150'><strong>Name</strong></td>
   <td width='150'><strong>Name</strong></td>
   <td width='150'><strong>Compressed</strong></td>
   <td width='250'><strong>Compressed</strong></td>
   <td width='150'><strong>Uncompressed</strong></td>
   <td width='250'><strong>Uncompressed</strong></td>
   <td><strong>Notes</strong></td>
   <td><strong>Notes</strong></td>
  </tr>
  </tr>
Line 29: Line 29:
   <td>[http://downloads.skullsecurity.org/passwords/Connficker.txt Conficker.txt] (702 bytes)</td>
   <td>[http://downloads.skullsecurity.org/passwords/Connficker.txt Conficker.txt] (702 bytes)</td>
   <td>Used by conficker worm to spread</td>
   <td>Used by conficker worm to spread</td>
</tr>
<tr>
  <td>[http://www.whatsmypass.com/?p=415 500 worst passwords]</td>
  <td>[http://downloads.skullsecurity.org/passwords/500-worst-passwords.txt.bz2 500-worst-passwords.txt.bz2] (1868 bytes)</td>
  <td>[http://downloads.skullsecurity.org/passwords/500-worst-passwords.txt 500-worst-passwords.txt] (3493 bytes)</td>
  </tr>
  </tr>
</table>
</table>


==Leaked passwords==
==Leaked passwords==
Passwords that were leaked or stolen from sites. I'm hosting them because it seems like nobody else does.
Passwords that were leaked or stolen from sites. I'm hosting them because it seems like nobody else does. Naturally, I'm not the one who stole these.
<table style='border-width: 1px; border-spacing: 2px; border-color: gray; border-style: outset; border-collapse: separate; color: #c0c0c0;'>
<tr>
  <td width='150'><strong>Name</strong></td>
  <td width='280'><strong>Compressed</strong></td>
  <td width='280'><strong>Uncompressed</strong></td>
  <td><strong>Notes</strong></td>
</tr>


List of passwords stolen from MySpace (not by me!), covers most common modern passwords: [http://downloads.skullsecurity.org/passwords/List-myspace.txt.bz2 List-myspace.txt]
<tr>
List of passwords stolen from MySpace with associated counts (not useful for bruteforcing, but great for studying): [http://downloads.skullsecurity.org/passwords/Myspace-counts.txt.bz2 Myspace-counts.txt]
  <td>MySpace</td>
List of passwords stolen from PHPBB (not by me!), covers most easy to crack modern passwords: [http://downloads.skullsecurity.org/passwords/List-phpbb.txt.bz2 List-phpbb.txt]
  <td>[http://downloads.skullsecurity.org/passwords/List-myspace.txt.bz2 List-myspace.txt.bz2] (175,970 bytes)</td>
List of passwords stolen from PHPBB with associated counts (not useful for bruteforcing, but great for studying): [http://downloads.skullsecurity.org/passwords/Phpbb-counts.txt.bz2 Phpbb-counts.txt]
  <td>[http://downloads.skullsecurity.org/passwords/List-myspace.txt List-myspace.txt] (356,352 bytes)</td>
Rockyou leaked passwords (32 million passwords) -- LARGE download (150mb+) -- thanks to Mark Baggett for the list:
  <td rowspan='2'>Ordered by commonness<br>Captured via phishing; not representative</td>
* Ordered by commonness: [http://downloads.skullsecurity.org/passwords/rockyou-unique-bycount.txt.bz2 rockyou-unique-bycount.txt]
</tr>
* With associated counts: [http://downloads.skullsecurity.org/passwords/rockyou-unique-withcount.txt.bz2 rockyou-unique-withcount.txt]
<tr>
* Original list: [http://downloads.skullsecurity.org/passwords/rockyou-full.txt.bz2 rockyou-full.txt]
  <td>MySpace - with count</td>
  <td>[http://downloads.skullsecurity.org/passwords/Myspace-counts.txt.bz2 Myspace-counts.txt.bz2] (179,929 bytes)</td>
  <td>[http://downloads.skullsecurity.org/passwords/Myspace-counts.txt Myspace-counts.txt] (653,504 bytes)</td>
</tr>
<tr>
  <td>phpbb</td>
  <td>[http://downloads.skullsecurity.org/passwords/List-phpbb.txt.bz2 List-phpbb.txt.bz2] (29,361 bytes)</td>
  <td>[http://downloads.skullsecurity.org/passwords/List-phpbb.txt List-phpbb.txt] (58,472 bytes)</td>
  <td rowspan='2'>Ordered by commonness<br>Cracked from md5; first 8494</td>
</tr>
<tr>
  <td>phpbb - with count</td>
  <td>[http://downloads.skullsecurity.org/passwords/Phpbb-counts.txt.bz2 Phpbb-counts.txt.bz2] (33,151 bytes)</td>
  <td>[http://downloads.skullsecurity.org/passwords/Phpbb-counts.txt Phpbb-counts.txt] (126,424 bytes)</td>
</tr>
<tr>
  <td>Rockyou - original</td>
  <td>[http://downloads.skullsecurity.org/passwords/rockyou.txt.bz2 rockyou.txt.bz2] (139,943,478 bytes)</td>
  <td>[http://downloads.skullsecurity.org/passwords/rockyou.txt rockyou.txt] (289,836,298 bytes)</td>
  <td rowspan='3'>Stolen as-is<br>Thanks to Mark Baggett<br>for the tip!</td>
</tr>
<tr>
  <td>Rockyou - by count</td>
  <td>[http://downloads.skullsecurity.org/passwords/rockyou-bycount.txt.bz2 rockyou-bycount.txt.bz2] (60,498,886 bytes)</td>
  <td>[http://downloads.skullsecurity.org/passwords/rockyou-bycount.txt rockyou-bycount.txt] (139,921,497 bytes)</td>
</tr>
<tr>
  <td>Rockyou - with count</td>
  <td>[http://downloads.skullsecurity.org/passwords/rockyou-bycount.txt.bz2 rockyou-withcount.txt.bz2] (59,500,255 bytes)</td>
  <td>[http://downloads.skullsecurity.org/passwords/rockyou-bycount.txt rockyou-withcount.txt] (254,676,625 bytes)</td>
</tr>
</table>


All English words: [http://downloads.skullsecurity.org/passwords/English.txt.bz2 English.txt]
==Dictionaries, etc.==
Another English word file, helpfully provided by BlackFrog: [http://downloads.skullsecurity.org/passwords/English2.txt.bz2 English2.txt]
These are dictionaries of words (etc), not passwords. They may be useful for one reason or another.  
A German password list, ordered by length and then alphabetically. It's released under GPL (is that even valid? whatever), so I left the header intact -- make sure you remove it if you don't want to try the lines as passwords: [http://downloads.skullsecurity.org/passwords/German_list.txt.bz2 German_list.txt]
List of American cities, generated by [http://ha.ckers.org/blog/20090417/us-cities-dictionary/ RSnake]: [http://downloads.skullsecurity.org/passwords/US_Cities.txt.bz2 US_Cities.txt]


List of "500 worst passwords of all time", from [http://www.whatsmypass.com/?p=415 this story]: [http://downloads.skullsecurity.org/passwords/500-worst-passwords.txt.bz2 500-worst-passwords.txt]
<table style='border-width: 1px; border-spacing: 2px; border-color: gray; border-style: outset; border-collapse: separate; color: #c0c0c0;'>
<tr>
  <td width='120'><strong>Name</strong></td>
  <td width='300'><strong>Compressed</strong></td>
  <td width='300'><strong>Uncompressed</strong></td>
  <td><strong>Notes</strong></td>
</tr>
 
<tr>
  <td>English</td>
  <td>[http://downloads.skullsecurity.org/passwords/English.txt.bz2 English.txt.bz2] (349,604 bytes)</td>
  <td>[http://downloads.skullsecurity.org/passwords/English.txt English.txt] (1,055,781)</td>
  <td>I forget where this came from</td>
</tr>
<tr>
  <td>English (2)</td>
  <td>[http://downloads.skullsecurity.org/passwords/English2.txt.bz2 English2.txt.bz2] (975,280 bytes)</td>
  <td>[http://downloads.skullsecurity.org/passwords/English2.txt English2.txt] (2,828,046)</td>
  <td>Found by Andrew Orr</td>
</tr>
 
<tr>
  <td>German</td>
  <td>[http://downloads.skullsecurity.org/passwords/German_list.txt.bz2 German_list.txt.bz2] (2,121,045 bytes)</td>
  <td>[http://downloads.skullsecurity.org/passwords/German_list.txt German_list.txt] (6,736,833 bytes)</td>
  <td>See header for credit info</td>
</tr>
<tr>
  <td>[http://ha.ckers.org/blog/20090417/us-cities-dictionary/ American cities]</td>
  <td>[http://downloads.skullsecurity.org/passwords/US_Cities.txt.bz2 US_Cities.txt.bz2] (77,081 bytes)</td>
  <td>[http://downloads.skullsecurity.org/passwords/US_Cities.txt US_Cities.txt] (207,041 bytes)</td>
  <td>Generated by RSnake</td>
</tr>
<tr>
  <td>"Porno"</td>
  <td>[http://downloads.skullsecurity.org/passwords/porno-passwords.txt.bz2 porno-passwords.txt.bz2] (7,158,285 bytes)</td>
  <td>[http://downloads.skullsecurity.org/passwords/porno-passwords.txt porno-passwords.txt] (46,955,376 bytes)</td>
  <td>World's largest porno password collection!</td>
</tr>
</table>

Revision as of 15:47, 2 March 2010

Password dictionaries

These are dictionaries that come with tools/worms/etc, designed for cracking passwords. As far as I know, I'm not breaking any licensing agreements by mirroring them with credit; if you don't want me to host one of these files, let me know and I'll remove it.

Name Compressed Uncompressed Notes
Cain & Able List-cain.txt.bz2 (1,069,968 bytes) List-cain.txt (3,149,586 bytes) Fairly comprehensive
John the Ripper List-john.txt.bz2 (10,934 bytes) List-john.txt (21,935 bytes) Simple, designed to be modified
Conficker worm Conficker.txt.bz2 (1411 bytes) Conficker.txt (702 bytes) Used by conficker worm to spread
500 worst passwords 500-worst-passwords.txt.bz2 (1868 bytes) 500-worst-passwords.txt (3493 bytes)


Leaked passwords

Passwords that were leaked or stolen from sites. I'm hosting them because it seems like nobody else does. Naturally, I'm not the one who stole these.

Name Compressed Uncompressed Notes
MySpace List-myspace.txt.bz2 (175,970 bytes) List-myspace.txt (356,352 bytes) Ordered by commonness
Captured via phishing; not representative
MySpace - with count Myspace-counts.txt.bz2 (179,929 bytes) Myspace-counts.txt (653,504 bytes)
phpbb List-phpbb.txt.bz2 (29,361 bytes) List-phpbb.txt (58,472 bytes) Ordered by commonness
Cracked from md5; first 8494
phpbb - with count Phpbb-counts.txt.bz2 (33,151 bytes) Phpbb-counts.txt (126,424 bytes)
Rockyou - original rockyou.txt.bz2 (139,943,478 bytes) rockyou.txt (289,836,298 bytes) Stolen as-is
Thanks to Mark Baggett
for the tip!
Rockyou - by count rockyou-bycount.txt.bz2 (60,498,886 bytes) rockyou-bycount.txt (139,921,497 bytes)
Rockyou - with count rockyou-withcount.txt.bz2 (59,500,255 bytes) rockyou-withcount.txt (254,676,625 bytes)

Dictionaries, etc.

These are dictionaries of words (etc), not passwords. They may be useful for one reason or another.

Name Compressed Uncompressed Notes
English English.txt.bz2 (349,604 bytes) English.txt (1,055,781) I forget where this came from
English (2) English2.txt.bz2 (975,280 bytes) English2.txt (2,828,046) Found by Andrew Orr
German German_list.txt.bz2 (2,121,045 bytes) German_list.txt (6,736,833 bytes) See header for credit info
American cities US_Cities.txt.bz2 (77,081 bytes) US_Cities.txt (207,041 bytes) Generated by RSnake
"Porno" porno-passwords.txt.bz2 (7,158,285 bytes) porno-passwords.txt (46,955,376 bytes) World's largest porno password collection!