Word List Downloads
#1
I have seen occasional requests on the forums for word lists so I thought I would post the best ones in one place.

If you know of a better site then please add it.

http://cyberwarzone.com/cyberwarfare/pas...word-lists

http://hashcrack.blogspot.de/p/wordlist-...ds_29.html

http://www.skullsecurity.org/wiki/index.php/Passwords

http://packetstormsecurity.org/Crackers/wordlists/

http://www.isdpodcast.com/resources/62k-...-passwords

http://g0tmi1k.blogspot.com/2011/06/dict...lists.html

http://www.md5this.com/tools/wordlists.html

http://www.md5decrypter.co.uk/downloads.aspx
Reply
#2
Thanks so much for taking the time, some pretty good stuff in there (can't wait to check out Naxxatoe, hopefully it's good).
Reply
#3
(06-10-2012, 11:54 PM)Socapex Wrote: Thanks so much for taking the time, some pretty good stuff in there (can't wait to check out Naxxatoe, hopefully it's good).

You're welcome Smile

There are further links as you go through those pages but I thought it best not to post everything. Any way you seem to have managed to dig down enough to find "Naxxatoe" !

I used to think that HUGE lists were best but I have a completely different view on it now. I prefer small, clean targeted lists rather than the monster overkill ones.

I modify my lists much more than most people would think necessary, I assume some would say I go too far as I remove all prefixed / suffixed numbers and lower case everything. There are many reasons I do this but its a bit long to explain now. atom is completely the opposite to me on this as far as I remember him saying. He uses lists as they are and rules to change them. I like base words and then rules to modify them in a particular way.

You might want to think about that Naxxatoe list, as I can get 30GB of passwords from a very small list when using multi rules.

If you don't know about multi-rules you are in for a treat !
Reply
#4
Here is my contribution:

http://360percents.com/wordlist/

Linux users also might want to take a look at these shell scripts:

http://360percents.com/posts/wordlist-by-scraping/
http://360percents.com/posts/wordlist-creator-script-2/
Reply
#5
OMG thanks for the scripts! French lists are so hard to find (where accents weren't screwed up). This is very kind Smile I'll definitely share my french dict with correct UTF-8 accents when it's done.

Hash-IT I think I agree (have to test it thoroughly first). As you know I'm just getting up to speed here. My current plan is one huge list of captured passes (Rockyou, phpbb, myspace, facebook, others... occurrence filtered) and then maybe 2 or 3 other mangling lists (names, cities, and words). I used to have one huge list, the first part all sorted by occurrence, the other just a merge of many many lists... As I intend to go after the old 2011 korelogic (just for fun), this will hinder me a lot. I think agility will help considering my hardware.

Any thoughts? Thanks for all the great info BTW guys!
Reply
#6
fizikalac thanks for the contribution, nice find ! Smile

@Socapex

I personally keep all my lists individually. However I probably spend too much time on this sort of thing !! Smile

If you put them all into one list you do get the benefit of making sure you have no duplications as you can "sort -u" the whole list (see what I did there ?) Smile However you will have to have some method that is reliable enough to sort a multi GB text file !!

Whatever you do, don't bother with the "Hate List", pure junk !! I cleaned that up and was left with 112MB, I'm not sure how big it was to start with but I remember it was huge.
Reply
#7
It is actually my website, not a find :$ You're welcome. I also prefer custom, small, language specific targeted wordlists.

WARNING: Be careful with sort -u because it can mess up UTF-8 unicode characters in your wordlist! Check if your locale / collation settings are correct before you do such sorting.
Reply
#8
(06-11-2012, 01:39 PM)fizikalac Wrote: It is actually my website, not a find :$ You're welcome. I also prefer custom, small, language specific targeted wordlists.

Nice site !

(06-11-2012, 01:39 PM)fizikalac Wrote: WARNING: Be careful with sort -u because it can mess up UTF-8 unicode characters in your wordlist! Check if your locale / collation settings are correct before you do such sorting.

This is the sort of thing that scares me, I never really know whats going on. I am worried I will ruin my lists, oh I do wish someone would make a new ULM !
Reply
#9
There is an interesting video over at:
http://www.irongeek.com/i.php?page=video...2/mainlist

"Size Does Matter: Password Tools and Data - Bob Weiss"
http://www.irongeek.com/i.php?page=video...-bob-weiss
Reply
#10
Lightbulb 
[Please, I need Help]

Hi there! Hey Hash-IT,

Firstly, forgive-me by my approach once I don't know you. Indeed, I'm a newbie here .

I need to discover, decrypt I meant, wifi WPA2PSK AES password. Have laptop, with OS win7 pro x64 pach1 and adapter intel Centrino Advanced N6205 15.15.0.1 from 17/11/2014 [driver], with also WinPcap and WinDump installed.
Also have Elcomsoft Wireless Security Auditor and Proactive Password Recovery , AirPcap (Riverbed) both installed, but not have the usb wifi device capture (Riverbed), so, what is the same of has nothing installed.

Therefore, I have downloaded oclhashcat-1.20 up to 1-36, but, with none skills to operate it. But at other hand, once guidance is received, with a huge easily to learn up fast.

I have the router manufactory name and device model, I know that the target is a 10 digit password, numbers and letters or only numbers and I already discover, the  MAC number, HEX key, plus the full web address of "patient's router", saved in .xml file.

Hope may hear from you soon.
Thanks in advance.
Ozerov



(06-11-2012, 12:08 AM)Hash-IT Wrote:
(06-10-2012, 11:54 PM)Socapex Wrote: Thanks so much for taking the time, some pretty good stuff in there (can't wait to check out Naxxatoe, hopefully it's good).

You're welcome Smile

There are further links as you go through those pages but I thought it best not to post everything.  Any way you seem to have managed to dig down enough to find "Naxxatoe" !

I used to think that HUGE lists were best but I have a completely different view on it now. I prefer small, clean targeted lists rather than the monster overkill ones.

I modify my lists much more than most people would think necessary, I assume some would say I go too far as I remove all prefixed / suffixed numbers and lower case everything.  There are many reasons I do this but its a bit long to explain now.  atom is completely the opposite to me on this as far as I remember him saying.  He uses lists as they are and rules to change them.  I like base words and then rules to modify them in a particular way.

You might want to think about that Naxxatoe list, as I can get 30GB of passwords from a very small list when using multi rules.

If you don't know about multi-rules you are in for a treat !
Reply