Abbrase – Abbreviated Passphrase Password Generator

Use Netsparker


Abbrase is an abbreviated passphrase password generator. An ‘abbrase’ is one of the passwords it produces. It generates a password and a phrase like “phyeigdolrejutt” and “physical eight dollars rejected utterly”.

Abbrase - Abbreviated Passphrase Password Generator

Creating secure passwords is easy. Remembering them is hard. Pwgen makes them memorable though pronounceability. XKCD suggests using a series of random common words, but memorising series of unrelated words can be difficult, and typing long phrases can be tedious.

Abbrase is an experiment in generating probable phrases using Markov chains and abbreviating each word to the first few letters. This strikes a balance between excessive password length and excessive mnemonic length. Passwords generated by Abbrase are as secure as a number with the same length. “122079103” and “toldulbal” (tolerably dull ball) are equally hard to attack.


Theory

Language is the most information-dense thing people memorise. Brains don’t operate on bits.

Pi recitation record-holders don’t have thousands of digits in their minds. They map clusters of digits to far more mentally palatable words, memorising a long story instead of a sequence of digits.

Memorising a grammatically sensible sentence fragment is easier than a sequence of randomly chosen words.

Picking a favourite phrase from the ones generated by Abbrase could make them very slightly easier to attack. A sophisticated attacker could check passwords that are likely to be picked before others. If the attacker can perfectly model which passwords you would prefer, this reduces the security of your password in a proportional amount to the number of passwords you selected it from — if you picked from 32 passwords generated by Abbrase, it makes your password 32x easier to attack (5 bits of security lost).

You can download Abbrase via Github here:

Or read more here.

Posted in: Password Cracking, Security Software

,


Latest Posts:


BDFProxy - Patch Binaries via MITM - BackdoorFactory + mitmProxy BDFProxy – Patch Binaries via MiTM – BackdoorFactory + mitmproxy
BDFProxy allows you to patch binaries via MiTM with The Backdoor Factory combined with mitmproxy enabling on the fly patching of binary downloads
Domained - Multi Tool Subdomain Enumeration Domained – Multi Tool Subdomain Enumeration
Domained is a multi tool subdomain enumeration tool that uses several subdomain enumeration tools and wordlists to create a unique list of subdomains.
Acunetix Vulnerability Scanner For Linux Now Available Acunetix Vulnerability Scanner For Linux Now Available
Acunetix Vulnerability Scanner For Linux is now available, now you get all of the functionality of Acunetix, with all of the dependability of Linux.
Gerix WiFi Cracker - Wireless 802.11 Hacking Tool With GUI Gerix WiFi Cracker – Wireless 802.11 Hacking Tool With GUI
Gerix WiFi cracker is an easy to use Wireless 802.11 Hacking Tool with a GUI, it was originally made to run on BackTrack and this version has been updated for Kali (2018.1).
Malcom - Malware Communication Analyzer Malcom – Malware Communication Analyzer
Malcom is a Malware Communication Analyzer designed to analyze a system's network communication using graphical representations of network traffic.
WepAttack - WLAN 802.11 WEP Key Hacking Tool WepAttack – WLAN 802.11 WEP Key Hacking Tool
WepAttack is a WLAN open source Linux WEP key hacking tool for breaking 802.11 WEP keys using a wordlist based dictionary attack.


2 Responses to Abbrase – Abbreviated Passphrase Password Generator

  1. firuz February 8, 2017 at 12:08 am #

    “122079103” and “toldulbal” (tolerably dull ball) are equally hard to attack.
    Don’t 9 digit only number passwords have much lower entrophy and easier to come accross to in dictionaries???

    • Darknet February 8, 2017 at 9:08 pm #

      In theory yah, but a dictionary attack would rarely do just numbers or just letters, they’d go through all [0-9,a-z, A-Z] all at once usually. So in practical sense there’s no real difference.