# Password Cracking Strategy | Using Pipal To Determine Common Password Patterns

**URL:** <https://onehack.st/t/password-cracking-strategy-using-pipal-to-determine-common-password-patterns/91798>\
**Category:** Tutorials & Methods\
**Tags:** privacy, cracking\
**Created:** [June 13, 2020, 1:07pm UTC](https://onehack.st/t/password-cracking-strategy-using-pipal-to-determine-common-password-patterns/91798 "2020-06-13T13:07:19Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![BlueHacker](https://onehack.st/user_avatar/onehack.st/bluehacker/32/174721_2.png) [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Post date:** [June 13, 2020, 1:07pm UTC](https://onehack.st/t/password-cracking-strategy-using-pipal-to-determine-common-password-patterns/91798/1 "2020-06-13T13:07:19Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/1/c/1c8ab74026631eeb1bd3802158761b9d9b9039e4.jpeg)

There is a tool built into Kali that can shed light on the strategies people use to create their passwords. This tool was developed by Robin Wood of ceWL fame.

Of course, I hope it goes without saying that this does not apply on every password and user, but remember we only have to crack **one** password to take down the entire network.

**Step #1: pipal Help**

Let’s begin by taking a look at the pipal help screen.

**kali \> pipal -h**

 ![image](https://onehack.st/uploads/default/original/3X/f/b/fbd2af3e59cc95d009b9372aa3a37943dd9e8fc8.png)

As you can see, the pipal syntax is simple. In most cases, we only need to invoke pipal with the number of top results we want to view and the filename of the containing the passwords.

pipal Syntax:

**pipal \<-t number of top results\>**

**Step #2: Test pipal on sample password lists**

One is from a password dump from Comcast users (Comcast is the largest cable TV and Internet provider in the US) from a few years back. In this file you will find nearly 600,000 unencrypted passwords. Let’s start by using this list to see how people are creating their passwords.

Make certain to download this list to your Kali system. I have downloaded this list to a flash drive and then connected the flash drive to my Kali VM. To bein the password analysis, simply enter;

**kali \> pipal -t 10 “comcast passwords.txt”**

 ![image](https://onehack.st/uploads/default/original/3X/6/2/62b275c179fcb256c04d8bd5b583474935a6a3b1.png)

As you can see above, pipal took just 30 seconds to analyze this password file. It then displayed the top 10 passwords indicating that “password” was the most common, “bluebird” was #2, and “12345678” was third. Also, note that the 10th most common password was “comcast1”. It has been my observation that people often use the name of the service in their passwords usually followed by a number. This makes it easier for them to remember and easier to crack.

If we scroll down the results, we can find data on the character sets used. On this list, 45% of the passwords use a lower case alphabetic characters and numbers and 39% use just lower case alphabetic characters.

 ![image](https://onehack.st/uploads/default/original/3X/3/c/3cfc12dc2b3f12c8065817d73b534bd1fea53e8e.png)

## Continue reading here:

> **[Password Cracking Strategy: Using pipal to Determine Common Password Patterns...](https://hackers-arise.com/password-cracking-strategy-using-pipal-to-determine-common-password-patterns/)**
>
> Welcome back, my aspiring cyber warriors!In my book "Getting Started Becoming a Master Hacker" and an earlier post, I encouraged you to develop custom password lists before you attempt to brute force passwords. Most often, users create passwords that...

---

<div class="post-metadata">

**Author:** ![odirachukwu\_onyejefu](https://onehack.st/user_avatar/onehack.st/odirachukwu_onyejefu/32/43629_2.png) [@odirachukwu\_onyejefu](https://onehack.st/u/odirachukwu_onyejefu)\
**Post date:** [June 14, 2020, 3:08am UTC](https://onehack.st/t/password-cracking-strategy-using-pipal-to-determine-common-password-patterns/91798/2 "2020-06-14T03:08:59Z")

</div>

Please how were you able to connect your flash drive to pass from the host system to your linux?