{"id":13797407,"url":"https://github.com/skyzyx/bad-passwords","last_synced_at":"2025-09-17T10:56:23.486Z","repository":{"id":20577429,"uuid":"23857932","full_name":"skyzyx/bad-passwords","owner":"skyzyx","description":"A list of the top 10,000 most-used passwords from hacked password lists.","archived":false,"fork":false,"pushed_at":"2017-09-16T19:16:09.000Z","size":1439,"stargazers_count":33,"open_issues_count":2,"forks_count":23,"subscribers_count":5,"default_branch":"master","last_synced_at":"2024-04-22T21:22:39.165Z","etag":null,"topics":["passwords","php","security"],"latest_commit_sha":null,"homepage":"","language":"PHP","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/skyzyx.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE-CC0","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2014-09-10T02:30:41.000Z","updated_at":"2023-12-07T18:04:08.000Z","dependencies_parsed_at":"2022-08-24T04:11:36.392Z","dependency_job_id":null,"html_url":"https://github.com/skyzyx/bad-passwords","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/skyzyx%2Fbad-passwords","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/skyzyx%2Fbad-passwords/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/skyzyx%2Fbad-passwords/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/skyzyx%2Fbad-passwords/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/skyzyx","download_url":"https://codeload.github.com/skyzyx/bad-passwords/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":222035649,"owners_count":16919923,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["passwords","php","security"],"created_at":"2024-08-03T23:01:30.060Z","updated_at":"2025-09-17T10:56:18.438Z","avatar_url":"https://github.com/skyzyx.png","language":"PHP","funding_links":[],"categories":["\u003ca id=\"6a5d962d62378399d7e12c1690188e7a\"\u003e\u003c/a\u003eWordlist"],"sub_categories":[],"readme":"# [Bad Passwords](http://github.com/skyzyx/bad-passwords)\n\nA list of the top 10,000 most-used passwords from hacked password lists.\n\nMutated list was generated by installing [John the Ripper](http://www.openwall.com/john/) and running:\n\n```bash\njohn --wordlist=raw.txt --rules --stdout \u003e raw-mutated.txt\n```\n\nThis produces a list which starts with the top 10,000 and makes commonplace alterations to that list. This increases the size of the list from 10,000 → over 422,000.\n\n## See Also…\n\n\u003e **NOTE:** This is a list of known-bad clear text passwords. For a list of known-bad password SHA-1 hashes, see https://github.com/skyzyx/bad-password-hashes.\n\n## Requirements\n### Required\nThe following software is **required** for Bad Passwords to run:\n\n* [PHP] 5.3.0+\n\n## Installation\n\n### Bundle with Composer (recommended!)\nTo add Bad Passwords as a [Composer] dependency in your `composer.json` file:\n\n```json\n{\n    \"require\": {\n        \"skyzyx/bad-passwords\": \"\u003e=1.0\"\n    }\n}\n```\n\nAnd include it in your scripts:\n\n```php\nrequire_once 'vendor/autoload.php';\n```\n\n## Contributing\nTo view the list of existing [contributors](/skyzyx/bad-passwords/graphs/contributors), run the following command from the Terminal:\n\n```bash\ngit shortlog -sne --no-merges\n```\n\n### How?\nHere's the process for contributing:\n\n1. Fork Bad Passwords to your GitHub account.\n2. Clone your GitHub copy of the repository into your local workspace.\n3. Write code, fix bugs, and add tests with 100% code coverage.\n4. Commit your changes to your local workspace and push them up to your GitHub copy.\n5. You submit a GitHub pull request with a description of what the change is.\n6. The contribution is reviewed. Maybe there will be some banter back-and-forth in the comments.\n7. If all goes well, your pull request will be accepted and your changes are merged in.\n\n\n## Authors, Copyright \u0026 Licensing\n\nMy intention is to release all rights to this documentation and make it available under the Public Domain. Unfortunately, in the U.S. it's not quite that cut-and-dry. So, I am dual-licensing this work under [CC0](LICENSE-CC0) and the [Unlicense](LICENSE-UNLICENSE). You can choose whichever license you would prefer to adhere to.\n\n\u003cp xmlns:dct=\"http://purl.org/dc/terms/\" xmlns:vcard=\"http://www.w3.org/2001/vcard-rdf/3.0#\"\u003e\n  \u003ca rel=\"license\"\n     href=\"http://creativecommons.org/publicdomain/zero/1.0/\"\u003e\n    \u003cimg src=\"http://i.creativecommons.org/p/zero/1.0/88x31.png\" style=\"border-style: none;\" alt=\"CC0\" /\u003e\n  \u003c/a\u003e\n  \u003cbr /\u003e\n  To the extent possible under law,\n  \u003ca rel=\"dct:publisher\"\n     href=\"https://github.com/skyzyx/php-coding-standards\"\u003e\n    \u003cspan property=\"dct:title\"\u003eRyan Parman\u003c/span\u003e\u003c/a\u003e\n  has waived all copyright and related or neighboring rights to\n  \"\u003cspan property=\"dct:title\"\u003eBad Passwords\u003c/span\u003e\".\nThis work is published from:\n\u003cspan property=\"vcard:Country\" datatype=\"dct:ISO3166\"\n      content=\"US\" about=\"https://github.com/skyzyx/php-coding-standards\"\u003e\n  United States\u003c/span\u003e.\n\u003c/p\u003e\n\n  [PHP]: http://php.net\n  [Composer]: https://getcomposer.org\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fskyzyx%2Fbad-passwords","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fskyzyx%2Fbad-passwords","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fskyzyx%2Fbad-passwords/lists"}