[Tutorial] bopscrk - Generate Smart Password Lists

[Tutorial] bopscrk - Generate Smart Password Lists - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: [Tutorial] bopscrk - Generate Smart Password Lists (/showthread.php?tid=6130245)

[Tutorial] bopscrk - Generate Smart Password Lists - guardian - Dec 29, 2020

bopscrk is a so called "smart password generator"
It uses information you provide to form a list of passwords that your target might use
You will need to have git installed, then clone into the repository

Code 
git clone https://github.com/r3nt0n/bopscrk

bopscrk is written in Python and the repositories brings a requirements.txt with it
Inside the file you find all the third party libraries that do not come preinstalled with Python
To make sure you have all the libraries needed on your box use from within the bopscrk directory:

Code 
pip3 install -r requirements.txt

Now that we have all the requirements installed, let's print out the help screen

Code 
python3 bopscrk.py -h

The results will be as follows:

[Image: zEbnZ3k.png]

--min and --max can be quite useful, when you are trying to crack the password of a service, where the user can only set a password with at least x characters and/or a maximum of y characters
-i is an option I would highly recommend using, because this is what makes your password list target oriented, instead of using a default list like rockyou.txt
When using -i, all the other options become irrelevant, as they will all be asked in the interactive prompt
Here you see an example usage of bopscrk interactive shell

[Image: AiISvVW.png]

I prefer this tool over cupps somehow, because cupps sometimes generates passwords that will surely not be the password and have absolutely nothing to do with the data I specified
Still, I am thinking about coding my own password list generator that will be super detailed
Hope I was able to get somebody into the world of custom password list generation and if you have any questions, message me