I need to select a project for this semester. I'm a second year uni student in Ethical Hacking and Countermeasures. My idea was to see if using some kind of pattern based password cracking can be more efficient than standard brute forcing or dictionary attacks.
By pattern-based cracking I mean something like:
where C is uppercase consonant, v lowercase vowel, D digit and so on. I would use lists of actual leaked passwords to generate a list of most likely patterns and code a little program to brute force it's way through the list based on the patterns. The above pattern would result in something like:
Baab1ba Baab1be Baab1bi ...
I've been trying to research if/how this was done before. However I'm unable to find any information. I think I'm using the wrong terminology for my searches.
What would this kind of cracking be called?
Is this likely a dead-end or is it possibly a (more) efficient way of attempting to brute force passwords?
(Alternatively, and I fear this might be off-topic, what are the 'newest' and promising methods of cracking passwords in 2014, if there are any? Anything worthy of doing research in?)
I've started generating the pattern list, if anybody is interested you can check the list here: http://mayar.abertay.ac.uk/~1204925/temp/list.txt So far it's generated using only a list of passwords leaked from Hotmail a couple of years ago. Will have a complete pattern list in a few days if anyone is interested, using 100'000s actual passwords