12 ms·
CrackStation's Password Cracking Dictionary
You can download it for free, too.
(p.s. no relation to the playstation 3 supercomputer thing)
- dfc 14y agoI am downloading the file now. I was a little surprised to see that you went with gzip. Given the target audience it is not that hard to imagine that the end user will have access to bzip2 or xz. With the size of the file why choose gzip? Hopefully `gzip -9` was used. I am curious about how much smaller xz/bzip2 will be. I will update this post once the file is downloaded.
- earthrise 14y agoI actually didn't compare gzip and bzip2 before uploading, and I probably should have. I did use `gzip -9`. I'm compressing it with bzip2 -9 now to see if it gets any smaller. I'll post a reply here when I know.
- dfc 14y agoUse xz. Debian, Gnome, Archlinux, Gentoo, Fedora have all switched to xz, and for good reason. I expect xz will offer a 20-30% reduction in file size. That will add up quick.
- earthrise 14y agoThanks, i'll run xz too!
- dfc 14y agoMy download has slowed to a crawl around 90% completion. I am doing 3k a second. When I read that your list was not sorted case sensitively I wondered what difference that may make. I did a little experiment with the american-wordlist-insane wordlist and sorting in the interim. I used msort which does a case sensitive sort[1] and sort which does not. Here are the results: 6830085 insane.msort 1461684 insane.sort.xz 1376548 insane.msort.xz It is not a big difference but it is still a little better. For future releases you may want to do a case sensitive sort. [1] Zebra comes before aardvark
- earthrise 14y agobzip2 saved about 200mb: gzip: 4293 bzip2: 4097 xz is still running
- cdjk 14y agoYou should consider creating a torrent for this - I'd help seed.
- manglav 14y agoYeah, I was surprised when a torrent wasn't available. This also seems like a perfect use case for http://burnbit.com/ http://burnbit.com/.
- dsl 14y agoburnbit is choking on it. Looks like 15G is a bit too much.
- earthrise 14y agoHere's a torrent: https://thepiratebay.se/torrent/8159583 https://thepiratebay.se/torrent/8159583 I'm not sure if I made it right... we'll see.
- jlgaddis 14y agoI have a decent server doing pretty much nothing, sitting on a link with a couple hundred Mbps of available bandwidth. If I can find a command-line BitTorrent client and figure it out, I'll help seed as well.
- earthrise 14y agoIt's not command line, but it has a nice web interface: transmission-daemon.
- deleted 14y ago[deleted]
- LoneWolf 14y agoMega is timing out on me, same with the mirror has will anyone kindly provide a torrent or another mirror?
- earthrise 14y agoHere's a torrent: https://thepiratebay.se/torrent/8159583 https://thepiratebay.se/torrent/8159583
- earthrise 14y agoSorry for the slowness and timeouts, everyone. I really underestimated the number of people who would want the file. Here's a torrent: https://thepiratebay.se/torrent/8159583 https://thepiratebay.se/torrent/8159583
- webber89 14y agoMagnet link for the censored people: magnet:?xt=urn:btih:fd62cc1d79f595cbe1de6356fb13c2165994e469&dn=crackstation.txt.gz&tr=udp%3A%2F%2Ftracker.openbittorrent.com%3A80&tr=udp%3A%2F%2Ftracker.publicbt.com%3A80&tr=udp%3A%2F%2Ftracker.istole.it%3A6969&tr=udp%3A%2F%2Ftracker.ccc.de%3A80 BTW, the guy's website is being HN'ed at the moment, so I'd come back in a couple hours or so.
- pemontto 14y agoWhat I've found common among publicly available dictionaries is the lack of space characters and I've seen a couple of write-ups where people actively strip space characters when creating dictionaries. Because of this most all my passwords contain a space character, and so far it's yet to cause me any problems.
- gst 14y agoThe download using Mega looks interesting. Seems that it is using the HTML5 FileSystem API to first download the file to a temporary location, without even showing a browser download dialog to the user. Someone created a thread on stackoverflow about this, but unfortunately it was closed: http://stackoverflow.com/questions/14923098/how-does-mega-co-nzs-download-manager-work http://stackoverflow.com/questions/14923098/how-does-mega-co...
- lurkinggrue 14y agoI can say when I saw that I candled out and just started torrenting it. It is a large file and I rather know where it was going and not on my ssd system drive.
- shawabawa3 14y agoIn case anyone is interested, the reason it does that is that the file is encrypted on the server and decrypted clientside in javascript. The decryption key is in the link's hashtag.
- steeve 14y agoIt is indeed, then it will use blob uris to switch to a normal "download", which really will copy the file locally on your drive.
- AlexDanger 14y agoWhats to stop the Checksum Calculator part of this site from adding your text (ie passwords) hashes to their dictionaries? https://defuse.ca/checksums.htm#checksums https://defuse.ca/checksums.htm#checksums I know the site says it doesnt record the information, but is there any more assurance beyond that?
- earthrise 14y agoI did some quick research a while ago and some of the online hash calculators that come up in google are affiliated with one of the online hash crackers. That was the main reason I made my own hash calculator page -- so I could create hashes easily without worrying about the preimages being remembered. So you are right to be concerned. I tried to think of a way you could test it for yourself, but for everything I thought of, I also thought of a way I could easily pass the test while still adding the preimages to the database. So for now you'll have to trust that I'm not, or use a different hash calculator. Here's the source code for that checksums page if you want to run it on your own: http://pastebin.com/tH6EVxR1 http://pastebin.com/tH6EVxR1
- polarix 14y agoOnly use a pure javascript checksum calculator online.