Saturday, January 17, 2009

Hacking Using Dictionary Attacks

There are recent news that Twitter was hacked using a regular dictionary-based attack. Since I recently took the Certified Ethical Hacker course, I got interested in looking around for dictionaries of common English words that can be used for such attacks. Popular password crackers like LOphtrack/LC4 and Cain & Abel use third-party dictionaries to do their brute-force cracking methods.

Here's a Google search query that returns listings of sites where you can download dictionaries. I have to admit -- some of my most commonly used accounts still use dictionary passwords. I should really get around to changing them one of these days.

No comments: