+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Pentesting and Forensics (https://hackforums.net/forumdisplay.php?fid=231)
+---- Thread: Optimal wordlists for RDP (/showthread.php?tid=6131136)
Optimal wordlists for RDP - kingboyd - Jan 3, 2021
I'm looking for a more optimised wordlist, going after default accounts. I created one myself, but it's small and I know there's better wordlists out there. None of the publicly available ones fit my needs. I'm willing to hack together my own, but want to go after default accounts. My wordlist looks like:
owner:owner
operations:operations
install:install
aspnet:aspnet
scanner:scanner
.
.
.
etc
I have a good automated setup which runs attacks against Administrator account and 200k password list. Success is low, and I know by going after non-admin and default accounts I'll have much higher success rate. What wordlists (account:password pairs) are people using?
RE: Optimal wordlists for RDP - hackxback - Jan 7, 2021
Code
https://www.google.com/search?client=opera&q=password+list+for+rdp&sourceid=opera&ie=UTF-8&oe=UTF-8RE: Optimal wordlists for RDP - guardian - Jan 10, 2021
Using public wordlists will not be successful in most cases, as there i literally thousands of people/scripts trying it everyday. You need to somehow create your own list with your own little twist to it.
RE: Optimal wordlists for RDP - Katas - Jan 10, 2021
(Jan 3, 2021 10:49 AM)kingboyd Wrote: I'm looking for a more optimised wordlist, going after default accounts. I created one myself, but it's small and I know there's better wordlists out there. None of the publicly available ones fit my needs. I'm willing to hack together my own, but want to go after default accounts. My wordlist looks like:
owner:owner
operations:operations
install:install
aspnet:aspnet
scanner:scanner
.
.
.
etc
I have a good automated setup which runs attacks against Administrator account and 200k password list. Success is low, and I know by going after non-admin and default accounts I'll have much higher success rate. What wordlists (account:password pairs) are people using?
That is too much.
Just change the keyword. Each letter