Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Wed, 16 Nov 2022 23:27:21 +0100
From: magnum <>
Subject: Re: experience with new wordlists weakpass3A and

On 2022-11-16 12:21, Johny Krekan wrote:
> Hello, I would like to know, whether some of you tried those newer wordlist.s
> in real password cracking. Is their size worth it or they contain just lots of
> passwords with small probability.

Wordlist quality usually decrease exponentially with size. They're 
usually full of garbage such as SQL injection artifacts and other stupid 
things. The kids that compile them lose their self control and end up 
aiming 100% for quantity instead of quality because the former is easier 
to measure and boast about. No gigabyte-sized wordlist has impressed me 
so far.

RockYou2021 was merely a molested collection of older wordlists, perhaps 
with some entirely new *pure crap* added. IIRC it came advertised with 
proud statements such as "removed all non-ASCII" as if that would be a 
good thing?! :shrug:  Anyway I did try it and got in the order of ZERO 
new cracks.

I never heard of weakpass3A but I wouldn't even bother looking for it 
unless someone I trust vouch for it. I'd be delighted to hear of some 
actually good ones though.

BTW what I would really like is a *collection* of high quality wordlists 
- with separate files for different languages, themes, sports, music, 
car brands and so on. The ones I've seen were truly ancient and usually 
only good for engligh language (eg. french, spanish or portugese 
wordlists are pretty much useless if transliterated, duh!).


Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.