PANIC Project

Slides from a Lightning talk at Brucon 2011 in Sept on project I have been working on for the past 3 months

Transcript

1. PANIC Project Password Analysis of Newsworthy Information Classification (working title)
2. The Project • Find Passwords and Emails • Normalize the data • Put it in a database • Compare or correlate emails and passwords (think RockYou but automated)
3. The Project (contd.) • Pull apart passwords to find useful data (numbers of upper case, lower case, numbers, and/or special characters) • Make pretty graphs (oooh pretty graphs)
4. Origins • Started as a blog post with Gawker(Drink!) and Lulzsec(Drink!) leaks. • Decided Pastebin was a good idea for more data and for a constant stream of new data and fresh data.
5. Current Progress • An idea • No working code. Well... no code. • A really good idea • People interested in helping
6. Future goals • The ability to upload one-off drops/leaks to the website • Quarterly “reports” on the top ~100 passwords and their stats • Compare reports to previous reports
7. Future Goals (contd.) • Possibly pull in time to crack based on password policy • Take hashed passwords and give them to a password cracker to get even more data • ??? • Profit?
8. Questions? • @biosshadow • biosshadow@biosshadow.com • https://biosshadow.com