- Custom password list creator
user@thm$ cewl -w list.txt -d 5 -m 5 http://thm.labs
-
-w will write the contents to a file. In this case, list.txt.
-
-m 5 gathers strings (words) that are 5 characters or more
-
-d 5 is the depth level of web crawling/spidering (default 2)
-
http://thm.labs
is the URL that will be used
- crunch is one of many powerful tools for creating an offline wordlist.
user@thm$ crunch 2 2 01234abcd -o crunch.txt
- Creates a wordlist containing all possible combinations of
two
characters includinga-d
and0-4
. - -o specifies a file to save to
crunch 8 8 0123456789abcdefABCDEF -o crunch.txt
- Creates a wordlist containing all possible combinations of
a-f
and0-9
- WARNING above command creates a file that is 459GB in size
- @ --> lower case alpha characters
- , --> upper case alpha characters
- % --> numberic characters
- ^ --> special characters including spaces
- If we know part of the password is
pass
followed by two numbersXX
we can generate a wordlist with the%
flag.
crunch 6 6 -t pass%%
- Output of wordlist
Crunch will now generate the following amount of data: 700 bytes
0 MB
0 GB
0 TB
0 PB
Crunch will now generate the following number of lines: 100
pass00
pass01
pass02
pass03