Hysen Labs
Open-source project
clem9669/wordlists avatar
clem9669

wordlists

Various wordlists FR & EN - Cracking French passwords

327 stars48 forksUnknownGPL-3.0
DEEP OPEN-SOURCE ANALYSIS

French wordlists give password crackers a language-specific starting point

clem9669/wordlists collects French-language password wordlists and publishes them as ready-to-use release archives. The lists are meant to be combined with hashcat or John the Ripper rules.

Why a French-specific list exists

The README explains that cracking English passwords is easier because English dominates the internet and resources like rockyou and hashorg2019 already exist. This project aims to provide French wordlists covering everything a person might use as a base password. The author notes that accented characters such as oe, ï, and ü are difficult to type and have been removed from the lists, since they rarely appear in real French passwords typed on standard layouts.

What ships in the releases

Three compiled versions of the wordlists are published in the GitHub releases section for convenience. The README warns that the large and medium compilations are too big for GitHub Actions, whose virtual machines offer only a 2-core CPU, 7 GB of RAM, and 14 GB of SSD storage. End users are free to combine only certain lists or all of them depending on their scope, and the project suggests deduplicating huge lists with the duplicut tool.

Sources and related tooling

The lists draw from many public sources, including Wikipedia, Grammalecte, weakpass, hashes.org, hashmob, packetstormsecurity, and the SecLists project. Keyboard walks are generated with the kwprocessor tool. The README states the lists and an associated hashcat rule have been used in the KoreLogic Password Cracking contest at Defcon, in work on haveibeenpwned hashes released by Troy Hunt, in the CrackTheCon contest, and in SANS SEC courses.

Editorial conclusion

The repository is published under the GPL-3.0 license and has been used in contests such as the KoreLogic Password Cracking contest at Defcon.

DEEP OPEN-SOURCE ANALYSIS

Official sources

Community notes

Community notes