Comments for Pyrit

Comment on Using the new CCMP-attack in Pyrit by The new CCMP attack against WPA/WPA2 PSK | Q&A System

The new CCMP attack against WPA/WPA2 PSK | Q&A System — Sun, 18 Dec 2011 03:18:29 +0000

[...] concern is that there is a tool called Pyrit which claims to make 7.9 million password guesses per second or about 682.5 Billion per day. This [...]

Comment on The twilight of Wi-Fi Protected Access by Esteban

Esteban — Tue, 27 Sep 2011 09:21:26 +0000

Or dont use PSKs? Use a radius server like FreeRADIUS

Comment on Lazy Tom by Paul

Paul — Sat, 20 Aug 2011 13:15:59 +0000

Where is hazeman11? We missed him. For the past 6 months no improvements. Damn.

Comment on The twilight of Wi-Fi Protected Access by Steve

Steve — Wed, 03 Aug 2011 11:34:48 +0000

First,
Thank you very much for the work done, and this wonderful blog.

Assumption:
The bear will eat you if you don’t run faster than the bear!

False!

You only need to run faster than the slower guy. He’ll be the bear’s breakfast, not you.

I have compiled about 50m real passwords from different hacks, from the Rockyou heist, gawker, Lulz sec , etc and sorted them statistically. The results are really scary!
Hence I can absolutely confirm that “People are stupid. They choose bad passwords all over the place”
The average length is 10ch and the clear winner is … “123456789″ with over 250,000 occurrences. Surprise!

When explaining WPA and Password Recovery, I have stopped calculating the probabilities, time needed or CP needed some time ago. I now explain to people the difficulty, not in time, but simply in energy cost: Telling someone that he may need to cough up few dozen million dollars for the electrical bill is more efficient than mentioning 63^127.

As for my 2 cents, here is what I suggest:

- Stop using “password” , think PassPhrase. You’ll automatically create a longer, more secure “password”
- Friends don’t let friends use words.
- Don’t use 8 or 63 ch long, Extremes are too easy (well..63 ..maybe not, but trying every 63 only would be faster than trying all 63^127)
- Use a GRC generated passphrase. it’s free..fast..and theoretically unbreakable in a life span. make it 50ch +
Don’t use generic ESSID. Make your own!
- Because you’ve used GRC, you can create a new unique randomly generated PassPhrase in 1 second. Okey then, use your calendar: put a reminder and change your password every month or so.
- Ah, while at it, increment your ESSID too, it takes an extra 2 seconds.
Using those simple simple steps would make the NSA and the CIA combined break a serious sweat, for a long time …

@ one hundred trillion guesses per seconds, a Passphrase of 59 RND ch long would take 1.56 billion trillion trillion trillion trillion trillion trillion trillion centuries.

https://www.grc.com/passwords.htm

Once again,
Thank you for the wonderful work on Pyrit

Comment on Native support for Windows by amparo

amparo — Thu, 28 Jul 2011 15:27:09 +0000

I use Windows because 99% of the apps I use are Windows based and because it works well for me and I like it.
The only reason why I have Linux installed is that 1% of the apps (such as pyrit) only work on linux.
Being forced to have two operating systems is a waste of space and time.

Comment on Pyrit now in Ubuntu Linux by Jose Quervo

Jose Quervo — Mon, 25 Jul 2011 21:43:13 +0000

Too bad apt-get install cpyrit-cuda doesn’t work…yet ;)! Can’t get mine to compile w/o errors.

^noob

Comment on Native support for Windows by skystar

skystar — Sat, 23 Jul 2011 20:07:26 +0000

I don’t any problem installing Linux, but the problem Linux doesn’t provide good driver for my AMD 6770 radeon card!

So if there is a windows version, then i can run pyrit without any problem, which support my card.

Comment on How to setup Pyrit in EC2 by vidkun

vidkun — Thu, 30 Jun 2011 17:56:58 +0000

When I tested this back when the GPU clusters first became available, I ended up seeing about 50k PMK/s on the first (main) instance and then only around 17k PMK/s on the rest of the instances. Didn’t put too much work into tweaking it though since i was getting more than that on my desktop machine for cheaper (free).

Comment on How to setup Pyrit in EC2 by ebfe

ebfe — Wed, 29 Jun 2011 10:33:04 +0000

If these parts are large, e.g. supply work for at least some minutes / hours.

Comment on How to setup Pyrit in EC2 by roland

roland — Wed, 29 Jun 2011 09:57:27 +0000

So it would be better to split the wordlist into 20 parts and give every instance another?