WORDLISTS

PRIMARY CATEGORY → PASSWORD ATTACKS

Wordlists Generation

Cewl

Cewl

Wordlists generation from a given web page providing its URL

cewl --depth <INTEGER> --min_word_length <INTEGER> --lowercase --write <OUTPUT_FILE> <URL>

Username Anarchy

Username Anarchy

Username Format Generator

It is really useful when trying to discover the naming convention used in the AD enviroment

./username-anarchy --input-file <USERSLIST>

CUPP

CUPP

python3 cupp.py --interactive

---

Passwords Mutation

Hashcat

Hashcat

Reference

Generate a Custom Wordlist

hashcat --force --rules-file=<RULES_FILE> --stdout <WORDSLIST> | sort -u > <OUTPUT_FILE>

Rules Wordlists

Wordlist
/usr/share/hashcat/rules/best64.rule
/usr/share/john/rules/best64.rule

Generate a Custom Wordlist and Crack on the Fly

hashcat --force -O --attack-mode <ATTACK_MODE> --hash-type <HASH_TYPE> --rules-file <RULES_FILE> <HASH_FILE> <WORDLIST>