firebadnofire
/
SecLists
mirror of https://github.com/danielmiessler/SecLists.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update README.md

This commit is contained in:
David McDuffie 2023-12-01 09:56:55 -07:00 committed by GitHub
parent 17e88de509
commit 77b6dc81ce
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
Passwords/Keyboard-Walks/README.md
View File

@ -1,4 +1,4 @@
Keyboard walks, also sometimes known as waterfalls or "spatial pattern" passwords, are passwords generated by typing adjacent keys on the keyboard, with `[SHIFT]` held occasionally in order to meet common complexity requirements (i.e. capital letters + symbols). These passwords may resemble randomly generated strings but are not nearly as strong, as they often follow predictable patterns and are easy to guess despite meeting length and complexity requirements. Due to both the structure of the QWERTY keyboard and [human preferences for memory chunking](https://www.sciencedirect.com/science/article/abs/pii/0010028572900126), most keyboard walks consist of multiples of four characters (4, 8, 12, 16, etc.)
Keyboard walks, also sometimes known as waterfalls or "spatial pattern" passwords, are passwords generated by typing adjacent keys on the keyboard, with `[SHIFT]` held occasionally in order to meet common complexity requirements (i.e. capital letters + symbols). These passwords may resemble randomly generated strings but are not nearly as strong, as they often follow predictable patterns and are easy to guess despite meeting length and complexity requirements. Due to both the structure of the QWERTY keyboard and [human preferences for memory chunking](https://www.sciencedirect.com/science/article/abs/pii/0010028572900126), most keyboard walks tend to consist of multiples of four characters (4, 8, 12, 16, etc.)
Some examples of commonly-used keyboard walk patterns are shown below: \
1. `1qaz@WSX3edc$RFV (one-down, shift two-down, three-down, shift four-down)`
@ -6,6 +6,8 @@ Some examples of commonly-used keyboard walk patterns are shown below: \
3. `1234qwer$#@!REWQ (one-right, q-right, shift one-left, shift q-left)`
4. `1q2w#E$R (half one-down, half two-down, shift half three-down, shift half four-down)`
These types of patterns should be thoroughly searched for during offline password cracking as keyboard walks are used often and do not contribute to strong security practices.
---
[walk-the-line.txt](https://github.com/danielmiessler/SecLists/blob/master/Passwords/Keyboard-Walks/walk-the-line.txt) was generated by iteratively concatenating basic 4-character patterns together into passwords of 8, 12, and 16 characters. The example passwords shown above can all be found within this file.