Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/tarraschk/richelieu
List of the most common French passwords
https://github.com/tarraschk/richelieu
audit bruteforce-wordlist cybersecurity dictionary security
Last synced: 25 days ago
JSON representation
List of the most common French passwords
- Host: GitHub
- URL: https://github.com/tarraschk/richelieu
- Owner: tarraschk
- License: cc-by-4.0
- Created: 2019-07-01T18:58:26.000Z (over 5 years ago)
- Default Branch: master
- Last Pushed: 2024-02-13T16:10:04.000Z (10 months ago)
- Last Synced: 2024-08-04T23:11:04.981Z (4 months ago)
- Topics: audit, bruteforce-wordlist, cybersecurity, dictionary, security
- Size: 107 KB
- Stars: 340
- Watchers: 9
- Forks: 99
- Open Issues: 4
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
- awesome-security-collection - **136**星
README
# Richelieu
### About Richelieu
Richelieu is a list of the most common French passwords. It's based on well known and public dataleaks. These data breaches have been filtered in order to keep only passwords related to ".fr" email addresses, and submitted to frequential analysis to find the most common passwords.
The goal is to provide French CISOs / CIOs / pentesters with a more accurate dictionary to conduct brute-force security assessments against their networks.
This project is maintained by [Maxime Alay-Eddine](https://github.com/tarraschk) and Paul Barbaste.
DISCLAIMER
THIS DICTIONARY IS PUBLISHED FOR LEGAL PURPOSES ONLY. PLEASE DO NOT USE IN MILITARY OR SECRET SERVICE ORGANIZATIONS OR FOR ILLEGAL PURPOSES.
---
### Download
```
git clone https://github.com/tarraschk/richelieu.git
```
---
### Why?
Common passwords usage is a very important vulnerability for big companies. Testing such issues is most of the time based on dictionary or brute-force attacks, however these dictionaries are not based on the culture of the targets.
This project aims to provide an open dictionary with French common passwords, so that people can really assess their risks with appropriate data.
### What are the data breaches
We used very easy to find data breaches to build this dictionary. Any personal data has been removed from the analysis, which is also why we only provide the top 20k of the most common passwords: if we provided more data, there would be a risk to find real firstnames and lastnames combinations.
### Does it make you more vulnerable?
Real hackers already build their own dictionaries and consider the nationality and culture of their targets: it's a fact. We only provide you this project "as-is" so that you can also check if your organization uses easy to find passwords.
### Anything fun?
The fact that these passwords are really common made us smile:
`france98`, `warcraft`, `carapuce`, `marseille`, `algerie`.
### What's next?
Well, if this project has enough success, we will conduct the same operation for other countries, in order to build a country-based dictionary for better dicitonary-based penetration testing.
### Licensing
This project is licensed under the [CC BY 4.0 license](https://creativecommons.org/licenses/by/4.0/).
[](https://creativecommons.org/licenses/by/4.0/)
### Cover picture
Source Pixabay: https://pixabay.com/illustrations/password-keyword-codeword-solution-866979/