Slides from a Lightning talk at Brucon 2011 in Sept on project I have been working on for the past 3 months

1. PANIC Project
Password Analysis of Newsworthy Information Classification
(working title)

2. The Project
• Find Passwords and Emails
• Normalize the data
• Put it in a database
• Compare or correlate emails and
passwords (think RockYou but automated)

3. The Project (contd.)
• Pull apart passwords to find useful data
(numbers of upper case, lower case,
numbers, and/or special characters)
• Make pretty graphs (oooh pretty graphs)

4. Origins
• Started as a blog post with Gawker(Drink!)
and Lulzsec(Drink!) leaks.
• Decided Pastebin was a good idea for more
data and for a constant stream of new data
and fresh data.

5. Current Progress
• An idea
• No working code. Well... no code.
• A really good idea
• People interested in helping

6. Future goals
• The ability to upload one-off drops/leaks to
the website
• Quarterly “reports” on the top ~100
passwords and their stats
• Compare reports to previous reports

7. Future Goals (contd.)
• Possibly pull in time to crack based on
password policy
• Take hashed passwords and give them to a
password cracker to get even more data
• ???
• Profit?

8. Questions?
• @biosshadow
• biosshadow@biosshadow.com
• https://biosshadow.com