Create an online list with https://relatedwords.io/dragon-ball-z
Username-anarchy
https://github.com/urbanadventurer/username-anarchy
username-anarchy -i INFILE > OUTFILE
# users.txt: firstname,lastname
username-anarchy -i users.txt -f flast,f.last,first.last,last.first,
#same as ctf-wordlist-names.sh
Cewl
# Download all words from example.org with a depth of 2
# The depth is the number of link level the spider will follow.
cewl -d 2 -w $(pwd)/example.txt https://example.org
cewl www.megacorpone.com -m 6 -w megacorp-cewl.txt
# Lets create a wordlist based on the email id details available under Team link.
cewl -n -e —email_file mailid.txt http://sneakycorp.htb
Manual scrap of relatedwords site
curl https://relatedwords.io/dragon-ball-z -s -L | grep -oi 'nofollow">.*</a>' | perl -pe 's/^nofollow">//; s/<\/a>//'
Shares spidering
Find files from shares
crackmapexec smb -u "<USER>" -p "<PASS>" --shares <IP RANGE> -d <DOMAIN> --spider "*" --content --pattern "<KEYWORD>"
Hashcat
# --force to avoid using the gpu
hashcat --force --stdout pwlist.txt -r /usr/share/hashcat/rules/best64.rule | grep '!'
for i in $(cat pwlist.txt); do echo $i; echo ${i}2019; echo ${i}2020; done > t
cat /usr/share/seclists/Passwords/Common-Credentials/top-passwords-shortlist.txt > pass.txt
hashcat --force --stdout users.txt -r /usr/share/hashcat/rules/best64.rule /usr/share/hashcat/rules/InsidePro-PasswordsPro.rule >> pass.txt
#remove duplicates
sort -u pass.txt >> clean_pass.txt
# remove space
grep --text -v '^[[:space:]]*$' clean_pass.txt > pass.txt
# Remove less than 7 characters words
egrep -xv '.{1,7}' pass.txt
# Keep 7 to 10 characters words
egrep -x '.{7,10}' clean_pass.txt > pass.txt
# Remove non text words
grep -naxv '.*' file.txt
TTPassGen
With TTPassGen we can craft wordlists from scratch.
# Create a wordlist containing all 4 digits PIN code values
ttpassgen --rule '[?d]{4:4:*}' pin.txt
# Generate a list of all lowercase chars combinations of length 1 to 3
ttpassgen --rule '[?l]{1:3:*}' abc.txt
# Create a new wordlist that is a combination of several wordlists.
# combine all wordlists data separated by a dash.
ttpassgen --dictlist 'pin.txt,abc.txt' --rule '$0[-]{1}$1' combination.txt
# Generate something like text1234
ttpassgen --rule '[?d]{1:4:*}' pin.txt
ttpassgen --dictlist 'megacorp-cewl.txt,pin.txt' --rule '$0$1' combination.txt
Crunch
https://www.hackingarticles.in/a-detailed-guide-on-crunch/
# Create a wordlist of letter from 2 to 2 characters
crunch 2 2 -o words.txt
#generate something like rosie2324%%
crunch 11 11 -t rosie%%%%^^
Bash: Generate a list
With a loop
for i in `seq 1 100`; do echo $i; done
write on the fly
└─$ cat > community <<EOF
heredoc> hello
heredoc> haha
heredoc> commen
heredoc> ddd
heredoc> EOF
└─$ cat community
hello
haha
commen
ddd
Other
Combine 2 lists (to create one)
./combinator.bin <file1> <file2>
Use loop in bash to combine 2 lists
for i in $(seq 1990 2050); do for a in $(cat months.txt); do echo "$a$i" >> wordlist.txt; done; done
Hashcat custom rules
Create a rule to add “1@3$5” to each password of the rockyou.txt
echo \$1@3$5 > demo.rule
hashcat -r demo.rule --stdout demo_passes.txt