security test: password dictionary file

[bigflavor]

Hello,


I was curious if anyone has a large password dictionary file.

We're looking to run a password cracking test on our network at request of the CIO.

I'm having trouble finding any free ones at all.


Thanks,
Matt

 

[ThomasE66]

Depending on what tool you're using you can probably find some stuff. A quick google search turned this page up just now: http://www.outpost9.com/files/WordLists.html

 

[bigflavor]

Depending on what tool you're using you can probably find some stuff. A quick google search turned this page up just now: http://www.outpost9.com/files/WordLists.html

Thanks a lot man, I appreciate it.

If anyone has more resources, please post them.

Here's one I've found today: http://wordlist.sourceforge.net/

Thanks,
Matt

 

[Tink]

Probably the most complete you will find

http://www.packetstormsecurity.org/Crackers/wordlists/

 

[LittleMe]

L0phtcrack 5 will do a dictionary attack in the free version. You can load other .dic's as well.

 

[bigflavor]

thanks guys....

we ended up using a program called john which actually didn't brute force; it just looks in the SAM file or what have you.

We're also looking for an older version of L0phtcrack for windows (did they make one?) since the current version is $850. Can anyone help?

peace,
matt

 

[LittleMe]

I've done the same thing here using LC5. 73% of my passwords were cracked before the brute force started. Which comes out to about 10minutes for 1624 accounts.