Wiki : ./Security/Password_Operations/Wordlists.md

  • See also [[Brute-Force]]

Cewl

Cewl can help creating context passwords from websites

cewl [url] -m [min amount of characters] -w [output]

JohnTheRipper

  • Can be used to modify existing password lists
  • More about rule generation here

Change existing rule set:

$ vim /etc/john/john.conf
... 
926 [List.Rules:Wordlist]
...
979 # Add two numbers at the end of each password
980 $[0-9]$[0-9]

Run mutation on a generated wordlist:

$ john --wordlist=[path to wordlist] --rules --stdout > mutated_wordlist.txt

Public Wordlists

Tools

i4