Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

NetSPI's Top Cracked Passwords for 2014

netspi.com | blog | #windows | #ntlm | #password-cracking | #statistics | #password-policy | #lm-hash

Summary

NetSPI reviews its 2014 cracking stats: of 90,977 collected Windows domain hashes, 85.52% cracked, with seasonal patterns like Spring2014, Password1, and company-name variants dominating the hits.
Published
Collected

original ↗

Related coverage

blog · netspi.com
Cracking Stats for Q2 2014
NetSPI's Q2 2014 cracking report: of 23,898 collected domain hashes, 89.82% cracked, eight-character passwords dominated, and 'Changem3' topped the list at 820 instances.
blog · netspi.com
Cracking Stats for Q1 2014
NetSPI's Q1 2014 cracking report: of 10,050 collected domain hashes, 74.73% were cracked, 'Password1' topped the list at 606 instances, and eight-character passwords dominated.
blog · netspi.com
Cracking Stats for Q3 2014
NetSPI's Q3 2014 cracking report: of 26,692 collected domain hashes, 82.25% cracked, with eight-character passwords peaking, 348 blank passwords found, and the top mask pattern seen 1,415 times.
blog · netspi.com
NetSPI’s Top Password Masks for 2015
Analyzes cracked NTLM domain hashes from a year of penetration tests to publish the top ten password masks, dominated by seasonal patterns like Spring15 and Fall2015.
blog · netspi.com
LM Hash Cracking – Rainbow Tables vs GPU Brute Force
Are rainbow tables still worth it for LM hashes? NetSPI compares table lookups with GPU brute force, explaining the format's two case-insensitive seven-character halves that favor GPU cracking.
blog · netspi.com
GPU Password Cracking – Building a Better Methodology
NetSPI details its GPU cracking methodology on a 1,000-hash sample: crack legacy LM hashes first, run dictionary attacks with rules, then apply the 43 most common mask patterns for quick wins.
back