killchain-compendium/Cryptography/Hashes/Wordlists.md

1.4 KiB

Generate Wordlists

Cupp

  • cupp
    • Interactive dialogue via cupp.py -i
    • Wordlistdownload via cupp.py -l
    • Connections to alecto DB via -a

crunch

crunch <minlen> <maxlen> <charPool> -o <output.file>
  • Option -t specifies variable characters
    • @, lower case alpha characters
    • ,, upper case alpha characters
    • %, numeric characters
    • ^, special characters including space
crunch 8 8 -t passw%%rd

ttpassgen

  • ttpassgen
  • Generate lists from the ground up
  • pip install ttpassgen
ttpassgen --rule '[?d]{6:6:*}' 6digitpins.txt
ttpassgen --rule '[?l]{1:5:*}' all_letter_combinations.txt
ttpassgen --dictlist "in.txt,in2.txt" --rule '$0[_]?$1' -s " " out.txt

An example for the policy of the following parameters. A given passwordlist as a base + 1 or 2 numbers + 1 or 2 a special characters

ttpassgen --dictlist "password_base_list.txt" --rule '$0[?d]{1:2:*}[!@#$%^]{1:2:*}' tt_password.list

exrex

  • Generate all possible outcomes from regex string