IT Security Stack Exchange
IT Security Stack Exchange

Questions tagged [dictionary]

A dictionary is a list of possible or common password that are used to crack passwords in a brute force attack. Such an attack is known as a dictionary attack.

81 questions
0
votes
1 answer

Are dictionary and rainbow table attacks a subset of brute force attacks or are they seperate?

This is more of a question on the actual use of the terms rather than the definitions, so my question is this: Are dictionary and rainbow table attacks a type of brute force attack or are they different entirely? Would it be okay to call a…
luek baja
  • 103
  • 2
0
votes
2 answers

Regarding Dictionary Attack

Since most websites will let user retry their password, lets say 3 times in a row, in case of mistype or forgotten password. Exceeding the set number of retry the account will be locked or timed out. If one were to use online dictionary attack to…
John Lee
  • 1
0
votes
1 answer

Smaller password lists

I hack wifi passwords with kali linux on airmon-ng and I make always password lists with crunch but the lists are always too long (I'm talking about <100 PT) and I want to know if is there a solution with the same result but with a small size.
David Lochmann
  • 11
0
votes
0 answers

Building a dictionary

I want to create a list of passwords to perform dictionary attack. Please show me how to build a password dictionary file. First, I gather information from users like hobbies, date of birth, favorite animals, etc. What should I do with this…
Phan Thanh
  • 1
  • 3
0
votes
0 answers

Is it possible to have and use a dynamic dictionary for brute-forcing?

For some reason - totally useless for the question - I have this PDF file with a password I forgot and I have no way to remember. I know for a fact (the person who created and gave me this PDF told me so) that the password starts with "AAbcDef", has…
Monok
  • 1
0
votes
2 answers

Will extra rules to my diceware list generation scheme decrease security?

I finished reading the Code Book by Simon Singh, I'm interested in playing with some of the ideas in the book to help increase my own understanding. I don't intend to implement the following in any consequential settings; I'm only interested in…
bbenz
  • 15
  • 5
0
votes
0 answers

How to run dirb or gobuster against dynamic html applications with same response data to every request?

I have an application under test. The application response with a simple HTML with a response code 200 to every requests. The HTML contains link tags and script tags which contains necessary js files and css files to render the HTML content later.…
Anonymous Platypus
  • 1,392
  • 3
  • 18
  • 33
0
votes
2 answers

Generating multi-word passphrases from a wordlist

As part of pentesting NT hashes where the underlying passwords are minimum 16 characters of length, I have created a wordlist of common words, sports teams, movies, names, years etc. - inspired by the approach in this paper…
Dino
  • 33
  • 1
  • 2
  • 7
0
votes
1 answer

Can brute force or dictionary attacks be detected when using the WiFi protocol?

Can the WiFi protocol recognize when a brute force or dictionary attack on it is occurring? WiFi gives the user an authentication failed message after entering an incorrect WiFi password several times.
genral Hummel
  • 17
  • 6
0
votes
1 answer

RDP Audit Failures Brute Force Attacks

I need some help on tracking the source of these RDP access attempts on our terminal server. Port 3389 is open on the firewall (I know this is a terrible practice. I don't want to hear advice on using a VPN for LAN access). I checked through the…
Anonymous Apprentice
  • 3
  • 2
0
votes
1 answer

How to Generate Custom Dictionary For this Password Structure

I am trying to carry out a dictionary attack for a password that is of this structure: 15 characters Lowercase letters and 0-9 First a five letter word then 4 numbers, then 6 letter word Examples of possible…
NULL
  • 503
  • 1
  • 5
  • 13
0
votes
1 answer

Generate a password dictionary from simple information

Suppose that we are going to perform a dictionary attack to crack the password of a known account. If we have some simple information from the account owner, such as first name, surname, age, date of birth, birthplace, etc, in form of a wordlist, is…
sisaman
  • 13
  • 4
0
votes
1 answer

How do I resume a dictionary attack using a custom starting number?

The script below generates 8 digit strings using a combination of characters 0123456789 from number 00000000 to 99999999. crunch 8 8 0123456789 | aircrack-ng -a 2 'HOME-TC-FILE-CAP' -e 'ESSID' -b 'HANDSHAKE' -w - I haven't finished generating all…
bingo bin
  • 101
-1
votes
1 answer

Where can I find good word list for MySQL 5?

I wonder where can I find good collections of dictionaries which can be used for MySQL 5 dictionary attack? I just need MySQL 5 word lists / dictionaries. I found a lot of MD5, SHA1, etc. but not MySQL 5 word list / dictionary.
Alamgir Ami
  • 1
  • 1
-1
votes
2 answers

What kind of dictionaries can be created from a normal dictionary?

We have many text files with ~all the words from a given language. Does someone know a "full" list of methods a word/dictionary can be remaked? ex.: testword can be converted using leetspeak (https://en.wikipedia.org/wiki/Leet) to:…
gasko peter
  • 843
  • 1
  • 12
  • 20
1 2 3 4
5
6