RE: [WEB SECURITY] Looking For a Username Dictionary

["Mark Mcdonald" <mmcdonald@xxxxxxxxxxxxxxxxxx>]

If you want to get a little more complex you can use the common permutations of names as well, like first letter of first name + last name.  Something I see in logs fairly frequently are the common unix usernames (root, guest, mysql, www-data) and similar for windows (Administrator, etc)


-----Original Message-----
From:	H. Morrow Long [mailto:morrow.long@xxxxxxxx]
Sent:	Mon 1/8/2007 9:59 AM
To:	Jason Wood; Web Security
Cc:	
Subject:	Re: [WEB SECURITY] Looking For a Username Dictionary

The most common usernames in the US (after sci-fi and fantasy character names...)
would probably be English first names followed by common last names (followed by
combinations of first and last names such as "johnsmith" and "billjones").

>From the US Census, here are the most common first and last names, ranked by popularity:

http://www.census.gov/genealogy/names/dist.female.first
http://www.census.gov/genealogy/names/dist.male.first
http://www.census.gov/genealogy/names/dist.all.last

The last names are what you'd expect (smith, johnson, 
williams, jones, brown, davis, miller, wilson, moore and
taylor are the top ten last names).

- H. Morrow Long, CISSP, CISM, CEH
  University Information Security Officer
  Director -- Information Security Office
  Yale University, ITS


On Jan 7, 2007, at 5:08 PM, Jason Wood wrote:

Hi all,
I'm looking for a username dictionary for some testing I'm doing.  I was able to find a password dictionary with out any problems, but I'm coming up short on a list of common usernames.  Does any know where I could find such a thing?

Thanks,
Jason
---------------------------------------------------------------------------- The Web Security Mailing List: http://www.webappsec.org/lists/websecurity/ The Web Security Mailing List Archives: http://www.webappsec.org/lists/websecurity/archive/ http://www.webappsec.org/rss/websecurity.rss [RSS Feed]





----------------------------------------------------------------------------
The Web Security Mailing List:
http://www.webappsec.org/lists/websecurity/

The Web Security Mailing List Archives:
http://www.webappsec.org/lists/websecurity/archive/
http://www.webappsec.org/rss/websecurity.rss [RSS Feed]