Re: Word lists for passphrases

In a message dated 96-07-06 14:25:18 EDT, perry@piermont.com (Perry E. Metzger) writes: << "Perry E. Metzger" writes:
AwakenToMe@aol.com writes:
I have a util that will create a word list starting from aaaaaaaaaaa on up to anythingggggggg basically you could do every combination. Let me know if ya want it.
That would really be of great use for doing wordlist crack runs. It must have taken you a long time to write -- generous of you to offer it.
Thats funny. I thought you were being completely serious and I sent you this file. You are exactly right. it is of GREAT use for doing wordlist crack runs. Why dont ya check out some realllyyy secure systems and find out what utils they use to test their own security. I ALWAYS use created segments of
I want to apologize to everyone for being gratuitously nasty here. It wasn't called for. this when trying to brute force my way into my OWN machine. It helps finding bugs that overwrite the stack..etc. But... apology accepted. You may learn from it.

AwakenToMe@aol.com writes:
I have a util that will create a word list starting from aaaaaaaaaaa on up to anythingggggggg basically you could do every combination. Let me know if ya want it.
That would really be of great use for doing wordlist crack runs. It must have taken you a long time to write -- generous of you to offer it.
I want to apologize to everyone for being gratuitously nasty here. It wasn't called for.
Thats funny. I thought you were being completely serious and I sent you this file. You are exactly right. it is of GREAT use for doing wordlist crack runs.
If you generate every possible word, you aren't getting any advantage by using crack and not just trying every possibility in your cracker itself. The whole point of trying english words is to try to reduce the search space. I would try to explain this to you, but it probably isn't worth while. Furthermore, generating every possible word is trivial -- its the sort of assignment you give to kids in their first week of programming. No one needs to be given such a program -- its only about four or five lines of C.
Why dont ya check out some realllyyy secure systems and find out what utils they use to test their own security.
Don't teach granpaw to suck eggs, sonny. Perry

On Mon, 8 Jul 1996, Perry E. Metzger wrote:
If you generate every possible word, you aren't getting any advantage by using crack and not just trying every possibility in your cracker
I'm not sure if anyone actually still cares about getting wordlists, if not you can delete this now.. :) Someone probably mentioned this anyway, but just in case.. If you have access to a shell, and to the news spool, you can generate some quick lists by hopping into the directory of any newsgroup that interests you and doing: cat * | tr -cs A-Za-z '\n' | tr A-Z a-z | sort | uniq > my-big-ol-wordlist With most unixes that will generate an alphabetized list of all the unique words in your source text, converted to lowercase. I've had some problems with tr on a few machines, however. Adding a '-c' after 'uniq' will tell you how many times each word occured (useful for grepping out words that appear too infrequently, or too frequently) .. Incidentally, if you're running crack against a particular person it might be useful to check dejanews for posts by the individual, and generate your wordlists from that, I havn't had occasion to actually try this but it seems like a good idea. --nc

Ben Holiday wrote:
If you have access to a shell, and to the news spool, you can generate some quick lists by hopping into the directory of any newsgroup that interests you and doing:
cat * | tr -cs A-Za-z '\n' | tr A-Z a-z | sort | uniq > my-big-ol-wordlist
With most unixes that will generate an alphabetized list of all the unique words in your source text, converted to lowercase. I've had some problems with tr on a few machines, however. Adding a '-c' after 'uniq' will tell you how many times each word occured (useful for grepping out words that appear too infrequently, or too frequently) ..
Actually I am fairly sure that your selection of words will be mediocre at best. There are words (such as nethermost, insatiable, insufferable) that are almost never used in news. - Igor.

-----BEGIN PGP SIGNED MESSAGE----- On Mon, 8 Jul 1996, Igor Chudov @ home wrote:
Ben Holiday wrote:
If you have access to a shell, and to the news spool, you can generate some quick lists by hopping into the directory of any newsgroup that interests you and doing:
cat * | tr -cs A-Za-z '\n' | tr A-Z a-z | sort | uniq > my-big-ol-wordlist
With most unixes that will generate an alphabetized list of all the unique words in your source text, converted to lowercase. I've had some problems with tr on a few machines, however. Adding a '-c' after 'uniq' will tell you how many times each word occured (useful for grepping out words that appear too infrequently, or too frequently) ..
Actually I am fairly sure that your selection of words will be mediocre at best. There are words (such as nethermost, insatiable, insufferable) that are almost never used in news.
According to Altavista: nethermost - 45 insatiable - 200 insufferable - 200 I know I have too much free time. - -- Mark =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= markm@voicenet.com | finger -l for PGP key 0xe3bf2169 http://www.voicenet.com/~markm/ | d61734f2800486ae6f79bfeb70f95348 "Freedom is the freedom to say that two plus two make four. If that is granted, all else follows." --George Orwell, _1984_ -----BEGIN PGP SIGNATURE----- Version: 2.6.3 Charset: noconv iQCVAwUBMeHp9bZc+sv5siulAQHjCgP6A/OuKaX/NwlkO9zhzbX2sBdKzajdKHHC FegZI5jIMd9hSFUb1iPUzw5H8YVaCQFDrighNnxLYvncAHB5dxAnRz52XjH4PFxj kDsH3CC3fN+x3Oh88HOwfcDKMiEAFbUkj+xSR5w6yxPt3mg9E27/xPef1Yg8bUWl gbsK/V0emcU= =Pr0B -----END PGP SIGNATURE-----

"Mark" == Mark M <markm@voicenet.com> writes:
Mark> According to Altavista: Mark> nethermost - 45 Mark> insatiable - 200 Mark> insufferable - 200 Mark> I know I have too much free time. According to Dejanews: Individual word hit counts * nethermost: 185 * insatiable: 1191 * insufferable: 752 * antidisestablishmentarianism: 142 :-) -- steve@miranova.com baur Unsolicited commercial e-mail will be proofread for $250/hour. Andrea Seastrand: For your vote on the Telecom bill, I will vote for anyone except you in November.
participants (6)
-
AwakenToMe@aol.com
-
Ben Holiday
-
ichudov@algebra.com
-
Mark M.
-
Perry E. Metzger
-
Steven L Baur