Skip to content

Instantly share code, notes, and snippets.

@m33x
Created August 29, 2017 18:38
Show Gist options
  • Save m33x/03031e764ae5de179315270973c5871f to your computer and use it in GitHub Desktop.
Save m33x/03031e764ae5de179315270973c5871f to your computer and use it in GitHub Desktop.
Panal (Password Analysis) 320m HIBP Passwords
Panal can perform some basic password analysis like reporting the most common length
and character-sets and counting the number of $HEX[] style passwords found.
Panal is written in C and performs well on _large_ datasets were common tools can not be used.
PACK (Password Analysis and Cracking Toolkit)
https://thesprawl.org/projects/pack/
Passpal
http://thepasswordproject.com/passpal
Pipal, Password Analyser
https://digi.ninja/projects/pipal.php
DATE: 2017-08-29
VERSION: 1.0
DATASET: 320m HIBP Passwords including Update-1 and Update-2
Length distribution of passwords
Length Count Percentage
8 103159954 32.20%
10 45838822 14.31%
9 42066372 13.13%
7 33906968 10.58%
6 20422927 6.38%
11 18628880 5.82%
12 14414045 4.50%
15 8451261 2.64%
13 8322875 2.60%
14 6533139 2.04%
16 4107334 1.28%
5 3099406 0.97%
18 1474439 0.46%
17 1410961 0.44%
20 1119092 0.35%
19 849120 0.27%
32 808163 0.25%
4 589327 0.18%
22 566080 0.18%
21 530626 0.17%
40 487332 0.15%
24 451962 0.14%
23 372128 0.12%
26 314635 0.10%
25 298688 0.09%
28 261564 0.08%
30 221286 0.07%
27 215607 0.07%
29 195751 0.06%
34 177064 0.06%
31 142805 0.04%
3 119911 0.04%
33 98235 0.03%
36 81930 0.03%
35 79046 0.02%
38 55278 0.02%
37 52561 0.02%
39 33318 0.01%
42 32054 0.01%
41 27567 0.01%
44 22890 0.01%
43 18152 0.01%
46 17407 0.01%
64 15451 0.00%
48 15374 0.00%
45 14884 0.00%
50 13562 0.00%
49 10774 0.00%
52 10079 0.00%
128 9646 0.00%
47 9435 0.00%
54 8952 0.00%
56 8032 0.00%
58 7370 0.00%
51 7367 0.00%
62 7160 0.00%
53 7133 0.00%
60 6932 0.00%
2 6586 0.00%
55 6512 0.00%
57 5943 0.00%
61 5544 0.00%
63 5452 0.00%
59 5306 0.00%
65 5219 0.00%
66 5158 0.00%
67 4414 0.00%
68 4372 0.00%
69 4005 0.00%
70 3993 0.00%
88 3612 0.00%
71 2930 0.00%
72 2802 0.00%
74 2489 0.00%
73 2289 0.00%
75 2037 0.00%
76 1833 0.00%
78 1562 0.00%
77 1520 0.00%
80 1491 0.00%
79 1264 0.00%
81 1094 0.00%
82 1073 0.00%
85 947 0.00%
84 833 0.00%
86 797 0.00%
83 792 0.00%
90 751 0.00%
92 626 0.00%
87 602 0.00%
91 531 0.00%
89 526 0.00%
100 526 0.00%
95 500 0.00%
94 496 0.00%
93 492 0.00%
255 478 0.00%
96 467 0.00%
98 422 0.00%
97 397 0.00%
105 346 0.00%
99 340 0.00%
104 318 0.00%
101 296 0.00%
110 294 0.00%
102 293 0.00%
103 286 0.00%
106 232 0.00%
1 201 0.00%
107 189 0.00%
108 188 0.00%
109 188 0.00%
112 183 0.00%
115 179 0.00%
114 174 0.00%
111 154 0.00%
113 135 0.00%
132 134 0.00%
116 132 0.00%
130 109 0.00%
118 106 0.00%
122 105 0.00%
119 103 0.00%
117 98 0.00%
124 91 0.00%
129 88 0.00%
120 83 0.00%
133 83 0.00%
123 80 0.00%
121 77 0.00%
134 77 0.00%
127 73 0.00%
125 71 0.00%
126 68 0.00%
131 59 0.00%
172 55 0.00%
136 50 0.00%
141 48 0.00%
142 46 0.00%
138 43 0.00%
135 41 0.00%
146 38 0.00%
140 37 0.00%
139 36 0.00%
145 34 0.00%
150 34 0.00%
148 29 0.00%
400 27 0.00%
157 26 0.00%
147 24 0.00%
137 23 0.00%
153 23 0.00%
144 22 0.00%
152 22 0.00%
154 22 0.00%
182 22 0.00%
156 21 0.00%
222 21 0.00%
160 20 0.00%
158 19 0.00%
143 16 0.00%
151 16 0.00%
155 16 0.00%
161 16 0.00%
163 16 0.00%
0 15 0.00%
186 15 0.00%
210 15 0.00%
149 14 0.00%
183 14 0.00%
165 13 0.00%
171 13 0.00%
195 13 0.00%
169 12 0.00%
173 12 0.00%
176 12 0.00%
178 12 0.00%
194 12 0.00%
224 12 0.00%
256 12 0.00%
164 11 0.00%
168 11 0.00%
175 11 0.00%
196 11 0.00%
200 11 0.00%
162 10 0.00%
174 10 0.00%
184 10 0.00%
188 10 0.00%
190 10 0.00%
202 10 0.00%
216 10 0.00%
246 10 0.00%
180 9 0.00%
192 9 0.00%
197 9 0.00%
159 8 0.00%
166 8 0.00%
204 8 0.00%
211 8 0.00%
214 8 0.00%
240 8 0.00%
258 8 0.00%
198 7 0.00%
199 7 0.00%
213 7 0.00%
220 7 0.00%
232 7 0.00%
243 7 0.00%
170 6 0.00%
181 6 0.00%
185 6 0.00%
189 6 0.00%
207 6 0.00%
219 6 0.00%
221 6 0.00%
228 6 0.00%
231 6 0.00%
234 6 0.00%
237 6 0.00%
249 6 0.00%
167 5 0.00%
191 5 0.00%
203 5 0.00%
212 5 0.00%
217 5 0.00%
226 5 0.00%
233 5 0.00%
238 5 0.00%
241 5 0.00%
244 5 0.00%
252 5 0.00%
260 5 0.00%
262 5 0.00%
282 5 0.00%
177 4 0.00%
187 4 0.00%
193 4 0.00%
206 4 0.00%
215 4 0.00%
230 4 0.00%
242 4 0.00%
245 4 0.00%
254 4 0.00%
261 4 0.00%
288 4 0.00%
315 4 0.00%
324 4 0.00%
208 3 0.00%
209 3 0.00%
225 3 0.00%
227 3 0.00%
239 3 0.00%
248 3 0.00%
251 3 0.00%
257 3 0.00%
259 3 0.00%
270 3 0.00%
273 3 0.00%
274 3 0.00%
277 3 0.00%
280 3 0.00%
294 3 0.00%
301 3 0.00%
308 3 0.00%
326 3 0.00%
336 3 0.00%
354 3 0.00%
358 3 0.00%
360 3 0.00%
364 3 0.00%
378 3 0.00%
380 3 0.00%
381 3 0.00%
396 3 0.00%
179 2 0.00%
201 2 0.00%
218 2 0.00%
236 2 0.00%
263 2 0.00%
266 2 0.00%
267 2 0.00%
286 2 0.00%
289 2 0.00%
292 2 0.00%
295 2 0.00%
300 2 0.00%
304 2 0.00%
314 2 0.00%
320 2 0.00%
322 2 0.00%
327 2 0.00%
330 2 0.00%
342 2 0.00%
370 2 0.00%
384 2 0.00%
385 2 0.00%
388 2 0.00%
392 2 0.00%
223 1 0.00%
229 1 0.00%
235 1 0.00%
250 1 0.00%
265 1 0.00%
269 1 0.00%
271 1 0.00%
272 1 0.00%
275 1 0.00%
276 1 0.00%
281 1 0.00%
283 1 0.00%
285 1 0.00%
297 1 0.00%
302 1 0.00%
305 1 0.00%
306 1 0.00%
309 1 0.00%
312 1 0.00%
313 1 0.00%
317 1 0.00%
318 1 0.00%
319 1 0.00%
321 1 0.00%
323 1 0.00%
328 1 0.00%
332 1 0.00%
334 1 0.00%
337 1 0.00%
339 1 0.00%
343 1 0.00%
345 1 0.00%
348 1 0.00%
350 1 0.00%
359 1 0.00%
362 1 0.00%
365 1 0.00%
366 1 0.00%
368 1 0.00%
369 1 0.00%
372 1 0.00%
376 1 0.00%
382 1 0.00%
386 1 0.00%
390 1 0.00%
394 1 0.00%
397 1 0.00%
398 1 0.00%
399 1 0.00%
TOTAL 320335120
Passwords range in length from 0 to 400
Password character set
Character Set Count Percentage
NumLcase 152186277 47.51%
Lcase 79276086 24.75%
Num 26122642 8.15%
NumMixed 22065443 6.89%
SymNumLcase 10159511 3.17%
SymLcase 7696774 2.40%
NumUcase 5983492 1.87%
Mixed 5529712 1.73%
NumUTF8 3267355 1.02%
SymNumMixed 2210113 0.69%
Ucase 1891953 0.59%
SymNum 1173033 0.37%
UTF8 1130652 0.35%
SymMixed 627841 0.20%
SymNumUcase 375844 0.12%
SymUcase 174813 0.05%
SymNumUTF8 94481 0.03%
SymUTF8 87208 0.03%
NumLcaseUTF8 75531 0.02%
LcaseUTF8 66454 0.02%
SymNumLcaseUTF8 33513 0.01%
SymLcaseUTF8 19937 0.01%
NumMixedUTF8 17648 0.01%
Sym 14665 0.00%
NumUcaseUTF8 11484 0.00%
SymNumMixedUTF8 10678 0.00%
MixedUTF8 7147 0.00%
UcaseUTF8 4796 0.00%
SymMixedUTF8 3132 0.00%
CtrlSymMixed 2199 0.00%
SymNumUcaseUTF8 2176 0.00%
CtrlSymLcase 2122 0.00%
SymUcaseUTF8 1884 0.00%
CtrlSymUcase 1461 0.00%
CtrlSym 1184 0.00%
CtrlSymNumMixed 1114 0.00%
CtrlSymNumLcase 1033 0.00%
CtrlNumLcase 987 0.00%
CtrlSymNumUcase 605 0.00%
CtrlSymNum 506 0.00%
CtrlLcase 466 0.00%
CtrlMixed 334 0.00%
CtrlNumMixed 223 0.00%
SymNumLcaseHibit 97 0.00%
NumLcaseHibit 85 0.00%
CtrlNumLcaseHibit 80 0.00%
NumMixedHibit 70 0.00%
CtrlNum 40 0.00%
Ctrl 37 0.00%
CtrlSymNumLcaseHibit 30 0.00%
CtrlNumMixedHibit 28 0.00%
SymNumMixedHibit 28 0.00%
CtrlUcase 25 0.00%
CtrlNumUcase 22 0.00%
LcaseHibit 17 0.00%
NULL-Pwd 15 0.00%
SymMixedHibit 10 0.00%
NumHibit 7 0.00%
Hibit 6 0.00%
SymLcaseHibit 4 0.00%
MixedHibit 4 0.00%
UcaseHibit 2 0.00%
SymHibit 1 0.00%
SymNumHibit 1 0.00%
SymUcaseHibit 1 0.00%
SymNumUcaseHibit 1 0.00%
Total 320,335,120 passwords processed
Total 4,931,244 $HEX[] style passwords found
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment