Vowel Frequency Word Analysis

I built this site while exploring password cracking during my cybersecurity journey. Instead of just watching Hashcat run for hours or days, I wanted to find smarter, more efficient ways to crack passwords by recognizing patterns. VowelFreq is a statistical analysis tool designed to optimize password cracking by leveraging vowel frequency and character positioning within words from the dictionary. Traditional brute-force attacks waste significant time testing unrealistic letter combinations. By analyzing word structures and separating vowels (aeiou) from non-vowels (bcdfghjklmnpqrstvwxyz), we can drastically reduce the keyspace required for effective cracking.

Hashcat allows up to four custom charsets [read more here] (?1 to ?4). By strategically assigning:

?1 → Vowel-only charset (aeiou)
?2 → Non-vowel charset (bcdfghjklmnpqrstvwxyz)
    

We can leverage brute force attacks based on common word patterns. For example, instead of blindly attempting all 26⁸ 208 billion possible lowercase combinations for an eight-letter password, we recognize that such words often follow a vowel/non-vowel pattern. By reducing a non-vowel charset to 21 characters by removing the vowels and create a vowel only charset, we could run the same eight-letter brute force with ?2?1?2?2?1?2?1?2, which would reduce the keyspace to ((21⁵) + (5³)) or 4 million possibilities! We can take this a step further by adding known numbers with the vowel charset, 3 is commonly replaced by eE - known as leetspeak. View the charsets link at the top for more information.

While running a character analysis from the rockyou.txt wordlist, I discovered the following charset is based on the most common characters to the least common characters:

ae10i2onrls938t45m67cdyhubkgpjvfwzAxEILORNSM.TCD_BqHYK!U-PG*J@FVWZ/#$X,\+&=)?Q(';"<]%~:[^`>

-Created by diGi ([email protected])