There are several password cracking tools that can use wordlists to crack passwords. Some popular tools include:
Implement dynamic salting – Even if the attacker has the wordlist, salting ruins precomputed hash lookups.
Use multi-factor authentication (MFA) – MFA renders password lists useless. Moroccan banks are adopting this, but local SMEs lag behind.
Password deny-lists – Maintain a custom deny-list from known Maroc breach dumps.
Voici un post prêt à publier sur les réseaux sociaux ou un forum (français) au sujet d'un wordlist/password.txt orienté Maroc, à usage éthique (tests de sécurité autorisés) : wordlist password txt maroc exclusive
Titre — Wordlist "password.txt" : ressources Maroc (usage éthique uniquement)
Contenu —
Vous cherchez une wordlist orientée pour le Maroc (mots, prénoms, villes, expressions locales) afin de réaliser des tests de sécurité ou des audits de mots de passe ? J’ai compilé une wordlist "password.txt" dédiée, comprenant :
Important — Utilisez ce fichier uniquement pour des audits et tests autorisés par le propriétaire des comptes ou dans des environnements de test. L’exploitation non autorisée est illégale et contraire à l’éthique.
Comment l’obtenir — Contactez-moi en message privé en précisant l’usage prévu (audit, formation, recherche) et je vous enverrai le fichier "password.txt" compressé. There are several password cracking tools that can
Exemples d’entrées (aperçu) —
Besoin d’une version personnalisée ? — Indiquez la cible (entreprise/secteur/localité) et j’adapterai la liste (filtres, règles de mutation, formats).
Hashtags — #cybersécurité #wordlist #pentest #Maroc #passwords
— Fin —
| Source | Type | Approx. Size | Rationale | |--------|------|--------------|-----------| | Moroccan Social Media (Twitter, Facebook public posts) | Textual posts (Arabic, Darija, French) | 12 M posts | Reflects current vernacular and slang. | | Public Forums (Maroc‑Web, Red‑Marrakech) | Discussion threads | 3.4 M messages | Contains user‑generated nicknames, slogans, and meme phrases. | | Open‑source Moroccan News Corpora | Articles (Arabic & French) | 1.8 M sentences | Provides formal lexical items and proper nouns. | | Leaked Password Dumps (publicly released, e.g., Jp‑Maroc, Maroc‑Leak 2021) | Raw passwords (anonymized) | 2.3 M entries | Direct insight into actual password choices. | | Lexical Resources (Arabic Morphology, Tamazight Wordlists) | Structured dictionaries | 500 k lemmas | Ensures coverage of less‑common roots. |
All data were collected in compliance with each platform’s terms of service and were filtered for Moroccan relevance using geo‑metadata, language detection (fastText, 99 % accuracy on the test set), and manual spot‑checking.
To create a wordlist password TXT file, you can use a text editor or a specialized tool. Here's an example of how to create a simple wordlist:
Example:
password123
qwerty
maroc2022
hashcat --stdout -r best64.rule maroc_base.txt > maroc_mutated.txt
cupp -i # interactively answer questions about Morocco: names, pets, birth year, city, etc.
| Metric | Maroc‑Exclusive | rockyou.txt (top 2 M) | |--------|-----------------|------------------------| | Unique tokens | 1.9 M | 14.3 M | | Overlap (exact match) | 0.9 % | — | | Average token length | 7.1 chars | 6.3 chars | | Proportion of tokens containing digits | 34 % | 21 % | | Proportion of tokens containing non‑ASCII chars | 48 % | 2 % |
These differences explain the complementarity of the two lists: Maroc‑Exclusive introduces a substantial set of non‑ASCII, numerically enriched entries that are invisible to English‑only dictionaries.