Finding and creating input dictionaries is a common process. There are many
dictionaries available that can be downloaded from Internet or, on the other
hand, tools that can be used to create input dictionaries. These dictionaries are
specically created for password cracking attacks. One of the main lists that we
have found, is Skull Security [3] a website written by Ron Bowes. In the web
page you can nd dictionaries that come with tools/worms/etc., designed for
cracking passwords and input dictionaries passwords that were leaked or have
been stolen from sites; Miscellaneous non-hacking dictionaries can be found,
which are dictionaries of words but not of passwords, they may be useful for one
reason or another. Also there are Facebook list passwords based on the directory
available from service Facebook User Directory [4].
There are other tools that can be used to generate input dictionaries from
Wikipedia, or other sources. The rst try was in a WikiGrabber command line
tool that builds custom dictionaries by spidering/crawling [22] web pages hosted
on Wikipedia or otherWWW5. Creating custom dictionaries based on Wikipedia
articles actually turned out to be a very dicult problem because it was hard