Pipal password analysis of the UN password leak (w/ blanks)

######################################################

 Pipal analysis of the TeamPoison UN email passwords
 (http://pastebin.com/FEcE9WzJ) with blank pwds (000)

######################################################

Total entries = 857
Total unique entries = 574

Top 10 passwords
000 = 270 (31.51%)
butchmun1 = 3 (0.35%)
12345 = 3 (0.35%)
undp = 2 (0.23%)
test = 2 (0.23%)
123 = 2 (0.23%)
kpc5vab = 2 (0.23%)
sn = 2 (0.23%)
*vanlop* = 2 (0.23%)
welcome = 2 (0.23%)

Top 10 base words
butchmun = 3 (0.35%)
password = 3 (0.35%)
test = 2 (0.23%)
kpc5vab = 2 (0.23%)
pablis = 2 (0.23%)
morin = 2 (0.23%)
david = 2 (0.23%)
undp = 2 (0.23%)
vanlop = 2 (0.23%)
welcome = 2 (0.23%)

Password length (length ordered)
2 = 10 (1.17%)
3 = 286 (33.37%)
4 = 47 (5.48%)
5 = 62 (7.23%)
6 = 139 (16.22%)
7 = 100 (11.67%)
8 = 131 (15.29%)
9 = 43 (5.02%)
10 = 24 (2.8%)
11 = 12 (1.4%)
12 = 6 (0.7%)
13 = 6 (0.7%)
14 = 2 (0.23%)
16 = 2 (0.23%)
17 = 2 (0.23%)

Password length (count ordered)
3 = 286 (33.37%)
6 = 139 (16.22%)
8 = 131 (15.29%)
7 = 100 (11.67%)
5 = 62 (7.23%)
4 = 47 (5.48%)
9 = 43 (5.02%)
10 = 24 (2.8%)
11 = 12 (1.4%)
2 = 10 (1.17%)
13 = 6 (0.7%)
12 = 6 (0.7%)
16 = 2 (0.23%)
14 = 2 (0.23%)
17 = 2 (0.23%)

   |
   |
   |
   |
   |
   |
   |
   |
   |  | |
   |  | |
   |  |||
   |  |||
   | ||||
   |||||||
   ||||||||
||||||||||||||||||
000000000011111111
012345678901234567

One to six characters = 539 (62.89%)
One to eight characters = 768 (89.61%)
More than eight characters = 89 (10.39%)

Only lowercase alpha = 352 (41.07%)
Only uppercase alpha = 8 (0.93%)
Only alpha = 360 (42.01%)
Only numeric = 317 (36.99%)

First capital last symbol = 1 (0.12%)
First capital last number = 8 (0.93%)

Months
may = 1 (0.12%)

Days
sunday = 1 (0.12%)

Months (Abreviated)
jan = 4 (0.47%)
mar = 10 (1.17%)
may = 1 (0.12%)
jun = 2 (0.23%)
oct = 1 (0.12%)
nov = 1 (0.12%)

Days (Abreviated)
mon = 5 (0.58%)
sun = 3 (0.35%)

Includes years
1977 = 1 (0.12%)
1985 = 1 (0.12%)
1996 = 1 (0.12%)
1998 = 1 (0.12%)
2000 = 2 (0.23%)
2003 = 2 (0.23%)
2004 = 1 (0.12%)
2008 = 1 (0.12%)

Years (Top 10)
2000 = 2 (0.23%)
2003 = 2 (0.23%)
1977 = 1 (0.12%)
1998 = 1 (0.12%)
1996 = 1 (0.12%)
1985 = 1 (0.12%)
2004 = 1 (0.12%)
2008 = 1 (0.12%)

Single digit on the end = 27 (3.15%)
Two digits on the end = 48 (5.6%)
Three digits on the end = 17 (1.98%)

Last number
0 = 284 (33.14%)
1 = 35 (4.08%)
2 = 17 (1.98%)
3 = 21 (2.45%)
4 = 20 (2.33%)
5 = 16 (1.87%)
6 = 19 (2.22%)
7 = 10 (1.17%)
8 = 17 (1.98%)
9 = 12 (1.4%)

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|| || |
||||||||||
0123456789

Last digit
0 = 284 (33.14%)
1 = 35 (4.08%)
3 = 21 (2.45%)
4 = 20 (2.33%)
6 = 19 (2.22%)
8 = 17 (1.98%)
2 = 17 (1.98%)
5 = 16 (1.87%)
9 = 12 (1.4%)
7 = 10 (1.17%)

Last 2 digits (Top 10)
00 = 276 (32.21%)
23 = 8 (0.93%)
11 = 7 (0.82%)
22 = 6 (0.7%)
56 = 5 (0.58%)
98 = 5 (0.58%)
06 = 5 (0.58%)
03 = 4 (0.47%)
99 = 4 (0.47%)
96 = 4 (0.47%)

Last 3 digits (Top 10)
000 = 273 (31.86%)
123 = 7 (0.82%)
345 = 4 (0.47%)
111 = 3 (0.35%)
956 = 2 (0.23%)
022 = 2 (0.23%)
873 = 2 (0.23%)
702 = 2 (0.23%)
143 = 1 (0.12%)
610 = 1 (0.12%)

Last 4 digits (Top 10)
2345 = 4 (0.47%)
1956 = 2 (0.23%)
1022 = 2 (0.23%)
2000 = 2 (0.23%)
2760 = 1 (0.12%)
1998 = 1 (0.12%)
2610 = 1 (0.12%)
0606 = 1 (0.12%)
7623 = 1 (0.12%)
2256 = 1 (0.12%)

Last 5 digits (Top 10)
12345 = 4 (0.47%)
11229 = 1 (0.12%)
68702 = 1 (0.12%)
97623 = 1 (0.12%)
71965 = 1 (0.12%)
76222 = 1 (0.12%)
00619 = 1 (0.12%)
24124 = 1 (0.12%)
50702 = 1 (0.12%)
50799 = 1 (0.12%)

Character sets
loweralpha: 352 (41.07%)
numeric: 317 (36.99%)
loweralphanum: 144 (16.8%)
mixedalpha: 15 (1.75%)
mixedalphanum: 10 (1.17%)
upperalpha: 8 (0.93%)
loweralphaspecial: 8 (0.93%)
upperalphanum: 1 (0.12%)
loweralphaspecialnum: 1 (0.12%)
mixedalphaspecial: 1 (0.12%)

Character set ordering
allstring: 375 (43.76%)
alldigit: 317 (36.99%)
stringdigit: 122 (14.24%)
stringdigitstring: 17 (1.98%)
othermask: 8 (0.93%)
digitstring: 5 (0.58%)
stringspecial: 4 (0.47%)
digitstringdigit: 4 (0.47%)
specialstringspecial: 2 (0.23%)
stringspecialstring: 2 (0.23%)
stringspecialdigit: 1 (0.12%)

Hashcat masks (Top 10)
?d?d?d: 274 (31.97%)
?l?l?l?l?l?l: 89 (10.39%)
?l?l?l?l?l?l?l?l: 64 (7.47%)
?l?l?l?l?l?l?l: 59 (6.88%)
?l?l?l?l?l: 50 (5.83%)
?l?l?l?l: 30 (3.5%)
?l?l?l?l?l?l?l?l?l: 20 (2.33%)
?d?d?d?d: 14 (1.63%)
?l?l?l?l?l?l?l?l?l?l: 13 (1.52%)
?l?l?l?l?l?d?d: 12 (1.4%)