Questions tagged [wordlist]
In infosec terms, a wordlist usually contains common & random words that might form a password or a list of words that are of interest with regards to your agenda. The words do not necessarily need to be comprehensible & understandable.
22 questions
0
votes
1
answer
101
views
Pentesters: Is it common for bruteforce/ dictionary attacks, e.g. for SSH username enumeration, to be successful in the real-world pentests? [closed]
I am learning and practicing on vulnerable-by-design machines (vulnhub, metasploitable etc.). I found that this machine is running OpenSSH 7.5, and I tried a few exploits of Username enumeration from ...
- 139
1
vote
0
answers
116
views
What's the most simple approach to this wordlist generation and ruleset problem?
This is a password recovery project, which is more complex than just generated a wordlist, since using my tries (see below) it seems to be not enough to just generate a wordlist.
I'm trying to recover ...
- 1,675
1
vote
0
answers
2k
views
How to crack KeePass database when knowing the first part of the master password [duplicate]
I have a KeePass 2.47 database which is protected with a master password and a key file.
I managed to lose the 2nd part of my master password. So, I have access to the database, the key file and the ...
- 111
1
vote
0
answers
259
views
How to limit number strings with crunch
I'm currently trying to generate a very specific word list. The words generated should go like this:
crunch 9 9 -t @%%%%%%,,-o test.txt
But one of the constraints that I have given myself is that the ...
- 11
4
votes
1
answer
522
views
Creating a custom wordlist for MS Word
I have a Word document that is password protected. Am I wrong in assuming that if I know nothing about the password that it’s basically a waste of time trying to crack it?
I do remember it’s two short ...
- 61
2
votes
2
answers
403
views
Need help generating list with crunch
I am new to Kali Linux.
I am trying to generate a wordlist of 6- whatever character words where:
the first part is an English word that starts with a capital letter
the last 5 characters are 8765. It ...
- 61
-1
votes
3
answers
363
views
Why are there often random email addresses in known password word lists?
In known wordlists like crackstation.lst there are random emails in the list. Why are they there?
- 1,025
0
votes
0
answers
14
views
How to pipe a character set on hydra [duplicate]
How to pipe a characterset to Hydra.
Something like this which can be done on hashcat
(crunch 8 8 123456789| hashcat -m 0 ce5cff0195a6b059a32411b6202ab49)
0
votes
1
answer
1k
views
Creating Wordlist from specific characters and numbers using Mentalist or similar program
I have locked myself out of my Win 10 Microsoft account by forgetting my password and need to get back into it. I have extracted the hash for the account.
I've been researching wordlists and hash ...
- 5
0
votes
1
answer
6k
views
John the ripper not able to crack the password
I generated two hashes from this site:
Plaintext 1 (p1): world
Salt 1 (s1): hello
Hash 1 (h1): 936a185caaa266bb9cbe981e9e05cb78cd732b0b3280eb944412bb6f8f8f07af
Plaintext 2 (p2): world2
Salt 2 (s2)...
- 103
2
votes
2
answers
3k
views
How to generate a wordlist from a partially known password
I have an old USB drive encrypted with Truecrypt and can't read my password writing. I can't tell if it's a capital or lower case letter and not sure if it's a 0 or an o, a t or a + on about 7 spaces. ...
- 21
0
votes
1
answer
805
views
Making already hashed wordlists of all possible combinations [duplicate]
Let us imagine a situation where a company stores its user passwords (let's ignore salts, etc for now) using some hash (say sha256) and the company gets breached. All of the username and password ...
- 1
1
vote
0
answers
175
views
How much time will Fugaku supercomputer take to generate a wordlist? [closed]
How much time will the Fugaku supercomputer take to generate a wordlist?
Length: 50
Combination: Alphabet(upper/lower) + numbers (0~9)
also, would wordlist generators make a significant time/...
-1
votes
1
answer
321
views
Wordlist generate: uppercase and each character appears only one [closed]
I want to generate a wordlist that contains only uppercase characters on length 8 and each character appears only once.
Is there any way to do that?
- 99
0
votes
2
answers
219
views
Is there a utility you would use to create wordlists from directories and files? [closed]
I have a home directory and a gpg file I am attempting to brute force. Is there a utility that you know that will recursively create wordlist from directives and file contents?
- 101
2
votes
0
answers
200
views
Making custom wordlists for languages besides English
I'm testing a site whose audience doesn't usually have English as their main language. When it comes to non-English, I consider there to be 3 groups
The target language's alphabet is a subset of the ...
- 3,482
2
votes
2
answers
2k
views
Wordlist generator with a certain pattern
I am trying to generate a wordlist. I am using crunch but I am stuck at defining the pattern I want the words to be generated. For example, I want to define a rule such as this:
Password: Ameri948 ca#
...
1
vote
1
answer
2k
views
Breaking Wifi password knowing its length of 8 [A-Z] alpha (upper-case) characters using Hashcat
I got the WPA handshake, now it's turn to crack the password using Hashcat. First, I wanted to make a wordlist of passwords [A-Z] the length of 8, but Crunch (the tool in Kali Linux) said it will take ...
- 13
2
votes
1
answer
497
views
John the Ripper / Hashcat rule, reject candidate if char at position X is the same as character at position Y
I'm using John to generate some wordlists and I'm trying to figure out the most optimized way to do the next step. What I want to do is add every possible 3 digit number to a set where the first digit ...
- 234
0
votes
1
answer
3k
views
Generate every alphanumerical combination in crunch within 8-20 characters in length
I want to generate combinations in sequential range of the length 8-20 with the following characters:
abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890!@#$%^&*()~`";.,/[]-=
How ...
- 3
2
votes
1
answer
3k
views
why my Metasploit folder does not have wordlists folder (usr/share/)?
I am trying to use msf word-lists but I just noticed in usr/share/metasploit-framework there are only two folders lib and config.
I am not sure how that happened but my msf is updated.
Is there any ...
- 121
1
vote
1
answer
768
views
Specify Amount of type of character Crunch
I'm sure these questions pop up a lot, but I can't find one that does what I'm looking for.
So, I'm trying to use crunch to generate a wordlist with specific amounts of each type of character, i.e. 2 ...
- 143