11-22-2011, 05:33 AM
i dont think using "base-words" is a good idea in password cracking. my experience shows using already cracked passwords are much more efficient, especially when they are mangled again, than clean wordlists. the same applies on building markov stats out of it.
take a look at the fingerprint attack. its basing on pattern, and my research shows its efficiency is unbeaten. i admit its hard to understand because most people do not know what an combinator engine is and that this attack is the combination of using automatically generated pattern inside an combintor engine.
if you think wpa passwords differ from website passwords you are right. they are either unchanged or uncrackable. this means generated using a random generator (default passwords, keepass) and therfore only crackable using brute-force (or a lot of luck) or they are combinations of already known pattern of the users, maybe with more mutations, additional chars. again, take a look at the fingerprint attack.
take a look at the fingerprint attack. its basing on pattern, and my research shows its efficiency is unbeaten. i admit its hard to understand because most people do not know what an combinator engine is and that this attack is the combination of using automatically generated pattern inside an combintor engine.
if you think wpa passwords differ from website passwords you are right. they are either unchanged or uncrackable. this means generated using a random generator (default passwords, keepass) and therfore only crackable using brute-force (or a lot of luck) or they are combinations of already known pattern of the users, maybe with more mutations, additional chars. again, take a look at the fingerprint attack.