Statistical models based password candidates generation for specified language used in wireless LAN security audit

The purpose of this article is to describe a new method which is proposed to be the best practice for creating a very effective password candidate lists for specified language, which could be then also used to test the security level of wireless networks protected by WPA/WPA2 PSK standards. The main principle of this technique is to create the statistical model of the new target language which could be used for password candidates generation in controlled order for security audit of the wireless network. It means that the list starts with more probable combinations, going to the less probable ones, so it can be said that this approach means sorting the Brute-force candidates according to specified language, or predicting the usage of letter combinations according to the specified language statistics. The tests have shown that this approach of generating more probable combinations as first, could improve the procedure since it is about 15 times faster in finding about 70% of passwords than common Brute-force attack, comparing to about 20% effectiveness of old dictionary attacks.