In information security and penetration testing area on the not uncommon problem arises when you need to crack the password. Cracking passwords – one of the most common crimes, leaving far behind the DoS-attacks and the creation of botnets. To successfully break the password is not just enough to get a good password recovery tool.
In this article we will look at the first of two relatively unknown attack vectors that may potentially disrupt the 30 to 70 percent of the actual password in a few minutes. The first method of selection method (Brute Force), as least effective way is to use a real password. An interesting fact is that most people choose a password of a very small list of common passwords:
0.5% of users have the password password;
0.4% have a password or passwords 123456;
0.9% have a password passwords, 123456 or 12345678;
1.6% have a password of the top 10 passwords
4.4% have a password of the top-100 passwords
9.7% have a password of the top-500 passwords
13.2% have a password of 1000 most popular passwords
30% have the best password 10000 password
Thus most of the passwords you can get a very easy way. Unfortunately, guaranteed to protect against password cracking is not possible.
