search

danielmiessler / SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
https://www.owasp.org/index.php/OWASP_Internet_of_Things_Project
MIT License
58.06k stars 23.87k forks source link

Censored Common Passwords #677

Open gilp06 opened 2 years ago

gilp06 commented 2 years ago

I'm wanting to use the Common-Credentials password list for a Science Fair project for Password Cracking. I wanted to know if there was a way I could get a version that doesn't have vulgar words because I don't think it would be school appropriate. If you can't provide this or know where else I can find something like this let me know.

I don't where else to put something like this so correct me if I need to send something like this somewhere else.

redstonedesigner commented 2 years ago

Your best bet would be to parse the list through something that checks for a list of vulgar words (for example, the Ofcom Attitueds to potentially offensive language and gestures on TV and radio guidance [Warning: This link contains a wide range of words that may cause offense (warning repeated on first page of document)]). In my opinion, providing a censored list would devalue the core intent of the repository, as some common passwords do contain vulgar words.

g0tmi1k commented 2 years ago

Thanks for the suggestion.

Thats a good point and idea. It would need someone to remove it and then make a pull request with it. There should already be various lists of "naughty words" to remove!

rf-peixoto commented 2 years ago

I can do this. Could you tell me which exact file you intend to use? I mean, "Common-Credentials" is a folder with several lists. I've already found a list of words to censor. If someone has time to do the new one before I do, I recommend doing some permutations for greater scope. Anyway, the repository in question has lists in several languages.

molangning commented 11 months ago

this looks interesting to implement

gilp06 commented 11 months ago

I know this is a bit old, but what I ended up doing was just making a python script that just parsed the list, and removed words that were profanity by just using a profanity checker library, and used that in my project.

molangning commented 11 months ago

check out pr #931 and see if there could be anything that can be added