Password Cracking Enhancement Techniques - Paiet/SEC-335 GitHub Wiki

Objectives:

• Enhance password cracking attack efforts by utilizing techniques such as Combinator, PRINCE, Toggle-Case, and Markov-Chain Attacks

---

• Combinator
  • Combine two or more dictionaries
• PRINCE
  • PRobability INfinite Chained Elements
    • Like a Combinator approach except
      • Only uses one dictionary
  • Create a useful dictionary based on known criteria
    • Example: passwords must be 6 chars long
      • Use only 6+ char words in a dictionary
      • Create 6+ char words using combinations of smaller words
        • 2 char words + 4 char words = 6 char words
• Toggle-case
  • Try every case possibility
    • aaa, aaA, aAA, AAA, AAa, Aaa
• Markov Chain
  • A statistical analysis of the passwords cracked through normal means
    • A file is generated with the most common elements
      • 'C' is the most common letter and is most commonly followed by 'a'
    • It then uses those stats to perform a dictionary/brute-force hybrid attack