# PWDB - New generation of Password Mass-Analysis

## Goal 
Leaving the 20 year old stuff of red team behind. Stuff works fine, and no one bothers to check/replace it trough decades. 

## Included dumps
You can check the status.txt in this repository to keep track of included dumps.

## Cool Stats

* From 1.000.000.000+ lines of dumps, `257.669.588` were filtered as either corrupt data(gibberish in improper format) or test accounts.
* 1 Billion credentials boil down to `168.919.919` passwords, and `393.386.953` usernames.
* Most common password is `123456`. It covers roughly `0.722%` of all the passwords. (Around 7 million times per billion)
* Most common 1000 passwords cover `6.607%` of all the passwords.
* With most common 10 million passwords, hit-rate is at `36.28%`.
* Average password length is `9.4822` characters.
* 12.04% of passwords contain special characters.
* 28.79% of passwords are letters only.
* 26.16% of passwords are lowercase only.
* 13.37% of passwords are numbers only.


## Unique Passwords

* `8.83%` of the passwords are unique - they were only found once. 
  * Their average length was `9.7965` characters.
  * Suprisingly, just a fraction of these passwords are meaningless.
  * Only `7.082%` of these passwords contain special characters - Rest matches `^[a-zA-Z0-9]$`
  * `20.02%` of these passwords are letters only, and `15.02%` is only lowercase.
    * Average length for lowercase-unique passwords were `9.3694` characters.
    
    
## Cool Stats of comparison with rockyou.txt

* Rockyou.txt contains `14.344.391` passwords. 
* After filtering most common `14.344.391` (same as rockyou) most common passwords, `11.583.476` of them were not in the rockyou.txt (a ratio of **%80**)
* Just in the first 1000 lines of rockyou and this data, there is a difference of **411** lines - meaning **411** passwords were not in rockyou.txt's top 1k lines.
  * From most common 1000 passwords, **37** of them were not in rockyou (all of rockyou). This passwords are:

### 37 passwords rockyou is missing that are ranked top 1000.
*Very likely that around 8 of these are from test accounts/bad dumps that i failed to filter correctly*
```
123hfjdk147
1464688081
159753qq
2012comeer
6V21wbgad
<password>
Blink123
D1lakiss
Exigent
Groupd2013
Indya123
N0=Acc3ss
R9lw4j8khX
Status
Telechargement
aobo2010
baili123com
bhf
cme2012
demon1q2w3e
demon1q2w3e4r
demon1q2w3e4r5t
exigent
g13916055158
hg0209
lincogo1
lizottes
megaparol12345
minecraft
nks230kjs82
nonmember
nyq28Giz1Z
pk3x7w9W
rr123456rr
startfinding
youbye123
yuantuo2012
```