05-15-2014, 01:59 AM
Earlier on, seeing that those file cracking programs had built in support for combining words, I asked about this, too, for the hashcats.
But, more recently, presented in themes at those password conferences, and written about by Ars Techinca, phrases gathered from Wikimedia sites and others, like "thereisnofatebutwhatwemake" have been found to be the bases for pass phrases.
Those types of lists are more likely to find passwords than just random words put together.
My appoach now is to handle those lists apart from the hashcats, then present them as if they were passwords, to the usual mangling.
But, more recently, presented in themes at those password conferences, and written about by Ars Techinca, phrases gathered from Wikimedia sites and others, like "thereisnofatebutwhatwemake" have been found to be the bases for pass phrases.
Those types of lists are more likely to find passwords than just random words put together.
My appoach now is to handle those lists apart from the hashcats, then present them as if they were passwords, to the usual mangling.