Security Basics mailing list archives

RE: password list generation


From: "Uber Wannabe" <nucleargeekdown () gmail com>
Date: Tue, 14 Aug 2007 15:15:53 -0500

The Argon wordlist is a good source of common passwords:
http://www.theargon.com/achilles/wordlists/

As for generating combinations, I think that THC Hydra allows creation of
passwords of a certain length.


-- N/A


-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of sami seclist
Sent: Tuesday, August 14, 2007 11:30 AM
To: security-basics () securityfocus com
Subject: Fwd: password list generation

Hi list,

I am pentesting the backbone of an ISP. There are several ssh and
telnet ports open, and I would like to launch a brute force password
attack. However, i want to lower the number of possibilities to try to
those common combinations we all use in our company (ACME2007,
AcmE2OO7, AcMe123, etc.).
is anybody aware of a tool that can generate a list of passwords from
a root word, the company name for example, or is there any source that
lists all the trivial combination of words commonly used as passwords.

Thanks guys.


Current thread: