+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: PASSWORD CRACKING - CREATE THE BEST BRUTE FORCE WORDLIST (/showthread.php?tid=6082491)
PASSWORD CRACKING - CREATE THE BEST BRUTE FORCE WORDLIST - OxaByte - May 28, 2020
This tutorial will show you how to create the BEST wordlist for fast bruteforce password cracking. This should be used if dict attacks have failed.
As with all my tutorials - USE LINUX. There is no reason not to, it takes 30 minutes and its way better for hacking. It also uses way less system resources, which is important for stuff like password cracking as it's resource intensive. If you can't set linux up just post/PM and I'll help.
1) get Crunch - type in terminal: sudo apt-get install crunch
2) You use crunch like this: crunch <min> <max> <charset> -t <pattern> – o <filename.lst>
min = minimum length of the password
max = maximum length of the password
Charset = Which characters you want to add in your wordlist like abcdefghijklmnopqrstuvwxyz or 1234567890. You will need to do upper and lower case if you want all of them.
-t <pattern> = This is the pattern you want to follow. Lets say you saw them enter the first three letters ('cat' and know the last letter is 'x') and it's an 6 digit password, you could do something like: cat@@x
This will make all passwords start with cat and change the characters that use @.
-o <output?> is what you want to call the output file.
3) so type: crunch 6 6 abcdefghijklmnopqrstuvwxyz -t cat@@x -o catfile.lst
4) type: cat catfile.lst
5) You should see something like:
catusx
catutx
catuux
catuvx
catuwx
catuxx
catuyx
catuzx
catvax
catvbx
6) you can do more complicated things with other options if you need to.
7) be careful of opening a big wordlist in an editor/terminal. It might crash your system if it's too big. There are special tools for editing them.
8) use this with your favourite password cracking program
RE: PASSWORD CRACKING - CREATE THE BEST BRUTE FORCE WORDLIST - chatteridiot - May 28, 2020
Similar tool @ github.com/tp7309/TTPassGen
RE: PASSWORD CRACKING - CREATE THE BEST BRUTE FORCE WORDLIST - MightyOne - May 31, 2020
This seems like a great way of creating some pass lists for brute forcing!
I got a great one im using already but its always good to know ! thanks
RE: PASSWORD CRACKING - CREATE THE BEST BRUTE FORCE WORDLIST - drtechy - May 31, 2020
Where is a good place to get password list
RE: PASSWORD CRACKING - CREATE THE BEST BRUTE FORCE WORDLIST - Hex.neo - Jun 2, 2020
Thanks, I will check this.
RE: PASSWORD CRACKING - CREATE THE BEST BRUTE FORCE WORDLIST - ragedomen - Jun 8, 2020
y wrote the same thats on github
RE: PASSWORD CRACKING - CREATE THE BEST BRUTE FORCE WORDLIST - H4x10r - Jun 8, 2020
If you really wanna have some success
use common pw wordlists.
Best source : https://github.com/berzerk0/Probable-Wordlists
Use them with RULES !
Best source: https://github.com/tmsteen/Hob0Rules
no more to say.
go away with crunch.
crunch is only helpfull if u need to generate pw lists where u at least know a bit about the pw !
then u are able to generate target specific wordlists with crunch with placeholders and stuff.
all other stuff if not needed anymore
hashcat can generate thos pws on the go.
hashcat -a 3 -m 0 example0.hash ?a?a?a?a?a?a as an example.
RE: PASSWORD CRACKING - CREATE THE BEST BRUTE FORCE WORDLIST - grizzslays - Jun 9, 2020
I have a ton of OSINT on a specific target. I have tried Cupp and Crunch using what is available. No luck. I'm thinking they are using the default password that comes with the router does anyone have any ideas/pointers on how to generate a proper wordlist for this situation? I can pay for servers no problem just don't want it to take years via bruteforcing. I have searched for leaked passwords for the router vendor to no avail.
Any help would be greatly appreciated. Will pay for help if need be.
RE: PASSWORD CRACKING - CREATE THE BEST BRUTE FORCE WORDLIST - 2xTheTap115 - Jun 9, 2020
(Jun 9, 2020 10:32 PM)grizzslays Wrote: I have a ton of OSINT on a specific target. I have tried Cupp and Crunch using what is available. No luck. I'm thinking they are using the default password that comes with the router does anyone have any ideas/pointers on how to generate a proper wordlist for this situation? I can pay for servers no problem just don't want it to take years via bruteforcing. I have searched for leaked passwords for the router vendor to no avail.
Any help would be greatly appreciated. Will pay for help if need be.
At the beginning I would recommend to you what exactly is the manufacturer's rule of creating default passwords (I think that googling router model should bring you relevant knowledge on this topic. If you did not know the manufacturer of this specific hardware, sites such as Macvendor will help you). Then, once you find out, you can easily generate the right dictionary. If your machine you are working on is inefficient, I recommend using GPUhash.me for a small fee in BTC in a relatively short time you can crack such a password (of course not in every case, although my experience with this site shows that its efficiency is some 85%). In addition, I recommend you take a look at my short tutorial on how to generate dictionaries:
Creating dictionaries based on information from OSINT - Tutorial part 1
Creating dictionaries based on information from OSINT - Tutorial part 2
I hope it helps you. greetings🙂👍
RE: PASSWORD CRACKING - CREATE THE BEST BRUTE FORCE WORDLIST - UnreleasedSTL - Jul 16, 2020
hopefully this helps, i been really trying to find a good place to find a list for bruteforcing