wabzsy / pwlist

Password lists obtained from strangers attempting to log in to my server.

SSH Brute Force Passwords

As many people do, I have a honeypot listening on port 22 which keeps a record of unauthorised login attempts. I wrote some scripts that analyse these attempts and generate password lists by various metrics, this repository holds the scripts as well as the output password lists.

Not all of them are good. My favs so far:

• Solid ~50k with all the common good passwords.

Password groupings implemented so far:

• By IP and SSH client name
• By IP
• By SSH client name