Educause Security Discussion mailing list archives

Re: Password Cracking Dictionaries


From: James Riden <j.riden () MASSEY AC NZ>
Date: Sun, 3 Oct 2004 14:18:01 +1300

Timothy Wright <twright () ND EDU> writes:

What sort of password cracking dictionaries are folks on this list
using?  In particular, for ensuring the compliance of a candidate
password with complexity rules (e.g., with cracklib).  There are
certainly many sources for dictionaries - has anything been adopted as a
de facto base from which to evolve a dictionary or dictionaries for a
given institution?

ftp://ftp.ox.ac.uk/pub/wordlists , and depends on what your target
language(s) is/are. I have a couple, starting with common passwords,
then common dictionary words, then a fairly complete dictionary -
about an order of magnitude difference in size between each.

--
James Riden / j.riden () massey ac nz / Systems Security Engineer
Information Technology Services, Massey University, NZ.
GPG public key available at: http://www.massey.ac.nz/~jriden/

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/groups/.

Current thread: