EvilZone
Community => General discussion => : Amy_016h January 20, 2013, 07:45:52 AM
-
For Twitter & FB? And if someone has all the info from their mom & dad's date of birth to the person's childhood friends, how long will it take to guess their password without using keyloggers etc. Do celebs use their closed ones as password, like if their half of posts are about how they love their best friends, will password be something about them?
-
There no set type of password that any one type of person uses, that said, people all over use stupid passwords. And celebs are people too, so i wouldn't be surprised to see firstnamelastnameDOB used for at least a few of them.
Again, it depends. That info could be fed into a wordlist as part of a dictionary attack, but if their password is "godsballs" then it won't do you much good.
Again, its possible. But odds are, not. Plan on them being not complete retards and having picked a password that has nothing to do with their personal life so that if they did and you get it, then you'll be pleasantly surprised.
Hope that answers your questions, but unfortunately most of what your asking is more psychology and a person's habits which varies from person to person so it's nigh on impossible to give you a straight answer.
-
Many just use easy to guess personal-info-derived passwords. But now more and more of them are starting to use randomly generated 8 to 16 character passwords that are managed by some password management software, like DataVault. So basically they can easily have a different randomly generated password for every website. In short, its getting harder and harder to "guess" passwords as more and more people are getting smarter about security and are starting to use randomized passwords and other security features.
-
Many just use easy to guess personal-info-derived passwords. But now more and more of them are starting to use randomly generated 8 to 16 character passwords that are managed by some password management software, like DataVault. So basically they can easily have a different randomly generated password for every website. In short, its getting harder and harder to "guess" passwords as more and more people are getting smarter about security and are starting to use randomized passwords and other security features.
Nothing is truly random behind a computer ;) In any case what's been said by others is all there really is to it. Try a little bit of social engineering. That's always the best and easiest method. Exploit the people not the machines.
-
Not sure if its been mentioned elsewhere, but CUPP is a nice tool for building, albeit simple, but effective wordlists. So if you can get basic info, you can use against the celeb.
Ive seen random passwords in the pw mgmt, BUT a simple password for KeePass, DataVault, LastPass etc.
http://www.social-engineer.org/framework/Computer_Based_Social_Engineering_Tools:_Common_User_Passwords_Profiler_(CUPP)