قالب وردپرس درنا توس
Home / Tips and Tricks / How to use Wordlister to create custom cracking password combinations «Zero Byte :: WonderHowTo

How to use Wordlister to create custom cracking password combinations «Zero Byte :: WonderHowTo



Using Wordlister & all of its options

We will work with Kali Linux to display Wordlister, but all other Linux distros should suffice.

The first thing we need to do is to download Wordlists from GitHub. We can use wget to retrieve it over HTTP directly from our terminal:

  ~ # wget https://raw.githubusercontent.com/4n4nk3/Wordlister/master/wordlister.py

--2020-02-24 12: 45: 36-- https://raw.githubusercontent.com/4n4nk3/Wordlister/master/wordlister.py
Resolving raw.githubusercontent.com (raw.githubusercontent.com) ... 1
51.101.148.133 Connects to raw.githubusercontent.com (raw.githubusercontent.com) | 151.101.148.133 |: 443 ... connected. HTTP request is sent, pending response ... 200 OK Length: 6195 (6.0K) [text/plain] Saves to: & # 39; wordlister.py & # 39; wordlister.py 100% [======================================================================================================================>] 6.05K --.- KB / s i 0s 2020-02-24 12:45:36 (18.5 MB / s) - & # 39; wordlister.py & # 39; saved [6195/6195]

The script needs Python 3 to work properly, so if it is not already installed, do it with the following command: [19659004] ~ # apt-get install python3

Now we can run the script with the command python3 :

  ~ # python3 wordlister.py

usage: wordlister.py [-h] - input INPUT --perm PERM - min MIN - max MAX
[--test TEST] [--cores CORES] [--leet] [--cap] [--up]
                     [--append APPEND] [--prepend PREPEND]
  wordlister.py: error: the following argument is required: - input, --perm, --min, --max 

It gives us some usage information and contains what arguments are required. We can add the -h flag to see the help menu, which is a little more organized and informative:

  ~ # python3 wordlister.py -h

usage: wordlister.py [-h] - input INPUT --perm PERM - min MIN - max MAX
[--test TEST] [--cores CORES] [--leet] [--cap] [--up]
                     [--append APPEND] [--prepend PREPEND]

 A simple dictionary generator and missing in python.

optional arguments:
-h, --help show this help message and exit
- Test TEST Output first N iterations (single process / core)
- cores CORES Manually enter processes / kernels as you wish
use
- led Activate l33t mutagen
--cap Activate activate mutagen
- up Enable large capital letters
- attach APPEND Add selected word (attach "word" to all passwords)
- prepare PREPEND Add selected word (dependent & # 39; words & # 39; to all passwords)

necessary arguments:
- input INPUT Enter file name
--perm PERM Maximum number of words to be combined on the same line
--min MIN Minimum generated password length
--max MAX Maximum Generated Password Length 

To use Wordlister, we first need an input file containing a list of passwords that we want to create permutations for and missing.

Use your favorite text editor to create a text file that contains a few common passwords (I only use a small number of passwords here for demonstration purposes since the permutations can be quite large). Here's how it looks:

  ~ # kattlista.txt

Password
hunter2
secret
iloveyou 

Now we are ready to run the script. Here are the necessary arguments:

  • input = name of text file containing password
  • perm = number of permutations to be combined on the same row
  • min = the minimum length of all generated password
  • max = maximum length for all generated passwords

Here is the full command and its output:

  ~ # python3 wordlister.py - input list.txt - perm 2 - min 6 - max 32

secret
Password
hunter2
I love you
secret password
secrethunter2
secretiloveyou
secret password
passwordhunter2
passwordiloveyou
hunter2password
hunter2iloveyou
iloveyousecret
hunter2secret
iloveyoupassword
iloveyouhunter2 

We can see that it only combined the given passwords in all possible permutations.

Wordlists contain a handful of useful arguments that are also optional. The option leet will convert all letters to numbers using leetspeak:

  ~ # python3 wordlister.py - input input.txt --perm 2 --min 6 --max 32 --leet

I love you
1l0v3y0u
hunter2
hunt3r2
Password
p455w0rd
secret
53cr3t
iloveyouhunter2
iloveyoupassword
1l0v3y0uhunt3r2
1l0v3y0up455w0rd
iloveyousecret
1l0v3y0u53cr3t
hunter2iloveyou
hunt3r21l0v3y0u
hunter2password
hunt3r2p455w0rd
passwordiloveyou
p455w0rd1l0v3y0u
passwordhunter2
p455w0rdhunt3r2
hunter2secret
secret password
p455w0rd53cr3t
secretiloveyou
hunt3r253cr3t
53cr3t1l0v3y0u
secrethunter2
53cr3thunt3r2
secret password
53cr3tp455w0rd 

The option cap will use the first letter of each password:

  ~ # python3 wordlister.py - input list.txt --perm 2 --min 6 --max 32 - - cap

I love you
Secret
Hunter2
Password
I love you
hunter2
secret
Password
IloveyouSecret
Iloveyouhunter2
Iloveyoupassword
IloveyouHunter2
Iloveyousecret
IloveyouPassword
SecretIloveyou
Secret Password
Secretiloveyou
SecretHunter2
Secrethunter2
passwordiloveyou
passwordHunter2
iloveyouSecret
passwordhunter2
iloveyoupassword
secret password
iloveyouHunter2
iloveyouhunter2
Secret Password
iloveyousecret
iloveyouPassword
passwordIloveyou
secret password
Hunter2Iloveyou
Hunter2Secret
Hunter2password
Hunter2secret
Hunter2iloveyou
Hunter2Password
hunter2Secret
hunter2Iloveyou
hunter2password
hunter2iloveyou
hunter2secret
secret password
PasswordIloveyou
hunter2Password
Password Secret
Passwordiloveyou
secret password
secretIloveyou
PasswordHunter2
Passwordhunter2
secretiloveyou
Password Secret
secretHunter2
secrethunter2 

The option will transform each letter of a word into uppercase letters:

  ~ # python3 wordlister.py - input list.txt --perm 2 - min 6 - max 32 --up

SECRET
secret
hunter2
HUNTER2
I LOVE YOU
Password
PASSWORD
I love you
SECREThunter2
Secret Password
SECRETHUNTER2
SECRETILOVEYOU
SECRET PASSWORD
SECRETiloveyou
secrethunter2
secret password
secretHUNTER2
secretILOVEYOU
hunter2password
hunter2iloveyou
hunter2ILOVEYOU
hunter2PASSWORD
secret password
passwordHUNTER2
secret password
passwordILOVEYOU
passwordhunter2
passwordiloveyou
HUNTER2SECRET
HUNTER2secret
HUNTER2ILOVEYOU
HUNTER2PASSWORD
HUNTER2password
HUNTER2iloveyou
ILOVEYOUsecret
ILOVEYOUSECRET
ILOVEYOUhunter2
ILOVEYOUpassword
secret password
ILOVEYOUHUNTER2
secretiloveyou
hunter2SECRET
hunter2secret
ILOVEYOUPASSWORD
PASSWORDhunter2
PASSWORD SECRET
PASSWORDHUNTER2
Password Secret
PASSWORDILOVEYOU
PASSWORDiloveyou
iloveyouSECRET
iloveyousecret
iloveyouhunter2
iloveyoupassword
iloveyouHUNTER2
iloveyouPASSWORD 

The option append will add a given word to all passwords:

  ~ # python3 wordlister.py - input list.txt --perm 2 --min 6 --max 32 - -Appendix 1969

secret
secret1969
Password
password1969
I love you
iloveyou1969
hunter2
hunter21969
secret password
secretpassword1969
secretiloveyou
secretiloveyou1969
secrethunter2
secrethunter21969
secret password
passwordsecret1969
passwordiloveyou
passwordiloveyou1969
passwordhunter2
passwordhunter21969
iloveyousecret
iloveyousecret1969
iloveyoupassword
iloveyoupassword1969
iloveyouhunter2
iloveyouhunter21969
hunter2secret
hunter2secret1969
hunter2password
hunter2password1969
hunter2iloveyou
hunter2iloveyou1969 

The option prepend will depend on any given word for all passwords:

  ~ # python3 wordlister.py - input list.txt --perm 2 - min 6 - max 32 - praise Dave

secret
Dave Secret
I love you
Daveiloveyou
Password
Dave Password
hunter2
Davehunter2
secretiloveyou
Davesecretiloveyou
secret password
Dave Secret Password
secrethunter2
Davesecrethunter2
iloveyoupassword
iloveyouhunter2
Daveiloveyouhunter2
Daveiloveyoupassword
secret password
Dave Password Secret
iloveyousecret
Daveiloveyousecret
passwordiloveyou
Davepasswordiloveyou
passwordhunter2
Davepasswordhunter2
hunter2secret
Davehunter2secret
hunter2iloveyou
Davehunter2iloveyou
hunter2password
Davehunter2password 

And of course, any of these alternatives can be combined for a larger number of potential passwords:

  ~ # python3 wordlister.py - input list.txt --perm 2 - min 6 - max 32 - let --cap - Appendix 1969

secret
secret1969
hunter2
53cr3t
53cr3t1969
hunter21969
hunt3r2
hunt3r21969
Password
Password1969
P455w0rd
P455w0rd1969
I love you
Iloveyou1969
I love you
1l0v3y0u
iloveyou1969
1l0v3y0u1969
Secret
Secret1969
1l0v3y0u
53cr3t
1l0v3y0u1969
53cr3t1969
Password
password1969
p455w0rd
p455w0rd1969
Hunter2
Hunter21969
Hunt3r2
Hunt3r21969
secrethunter2
secrethunter21969
secret password
secretpassword1969
53cr3thunt3r2
53cr3thunt3r21969
secret password
53cr3tp455w0rd
secretPassword1969
53cr3tp455w0rd1969
53cr3tP455w0rd

... 

This list can grow quite long from just a few initial passwords, so it can be beneficial when you create a custom dictionary for targeted password cracking.

Instead of printing the results to the terminal screen, we can direct the output to a text file that can be used to crack later:

  ~ # python3 wordlister.py - input input.txt --perm 2 --min 6 - -max 32 --leet --cap --append 1969> mywordlist.txt 

Wordlister has a function that will only output the specified number of iterations as well, if we wanted to control the length of our list a little better. Use test to do it:

  ~ # python3 wordlister.py - inputlist.txt --perm 2 --min 6 --max 32 - test 10

Password
secret
I love you
hunter2
secret password
passwordiloveyou
passwordhunter2
secret password
secretiloveyou
secrethunter2 

We can also manually specify the number of cores to use with the option . It can be useful when we don't want all our resources tagged at once:

  ~ # python3 wordlister.py - input list.txt --perm 2 --min 6 --max 32 - points 1

hunter2
Password
secret
I love you
hunter2password
hunter2secret
hunter2iloveyou
passwordhunter2
secret password
passwordiloveyou
secrethunter2
secret password
secretiloveyou
iloveyouhunter2
iloveyoupassword
iloveyousecret 

As we can see, this simple tool can be extremely powerful in creating targeted dictionaries.


Source link