[SkiplySimply]

How does one obtain a combolist? Does it come from SQL injection or what? I'm sick of using free combolists and not getting jack shit. I just wanna do my own work and profit from that.

[tux1]

A combo list is just a collection of username and passwords, so any where that stores these is a target. Most common way I've seen is where people use boolean searches on google to find lists, another way is to hack websites using for example SQLi. Another way I have seen is by using a generator, so if you have a list of usernames the tool will use generic passwords or generate ones based on the username.

[Fortunate]

A combo list is fust a collection of username and passwords, so any where that stores these is a target. Most common way I've seen is where people use boolean searches on google to find lists, another way is to hack websites using for example SQL. Another way I have seen is by using a generator, so if you have a list of usernames the tool will use generic passwords or generate ones based on the username.

Basically this, you can always try password lists but that is usually not that effective. You would need a list of usernames for that, and I have no idea where you can get that for a site.

[SkiplySimply]

A combo list is just a collection of username and passwords, so any where that stores these is a target. Most common way I've seen is where people use boolean searches on google to find lists, another way is to hack websites using for example SQLi. Another way I have seen is by using a generator, so if you have a list of usernames the tool will use generic passwords or generate ones based on the username.

That answered my question, much thanks to you. Have a good day.