topic Re: Generate word list for password cracking in Operating System - HP-UX

Generate word list for password cracking

Michael Ernstoff — Wed, 28 Mar 2001 15:00:46 GMT

Does anyone know of any utilities (HP-UX or Windows or DOS) which can take a list of words/phrases and mutate them in various ways to use as an input file for a password cracker.

I am thinking of things like:
Restrict number of character between x and y
Convert letter O to zero, letter L to 1, etc
Add numeric suffix to specified length e.g. pwd123, pwd134, ...
Capitalise word
Reverse word
etc, etc.

Also any good sources of word/phrase lists would be useful.

Thanks in advance

Re: Generate word list for password cracking

James R. Ferguson — Wed, 28 Mar 2001 15:06:18 GMT

Hi Michael:

Check out this:

http://www.openwall.com/john/

...JRF...

Re: Generate word list for password cracking

Michael Ernstoff — Wed, 28 Mar 2001 15:18:11 GMT

I had a look at the site you recommended.
I can see password cracking programs, and hashing algorithms, but no programs to generate / mutate the word lists.
Am I missing something?

Re: Generate word list for password cracking

James R. Ferguson — Wed, 28 Mar 2001 15:42:03 GMT

Hi Michael:

Sorry, I misunderstood the original question. Here's another link I found that, perhaps, will assist you:

http://www.multicians.org/thvv/gpw.html

...JRF...

Re: Generate word list for password cracking

Michael Ernstoff — Wed, 28 Mar 2001 15:50:08 GMT

Still not what I am looking for.
Suppose I have a list of 10,000 words/phrases.
For each of those 10,000 I want to create variations of the type
Letter to number (O to 0)
Capitalise first letter
Create numberic suffix to standard length
etc.

My output file would be a wordlist of at least tens of thousands, possibly hundreds of thousands.
I could then use this output file, as an input file to a password cracker that I already have.

Re: Generate word list for password cracking

Mark Vollmers — Wed, 28 Mar 2001 17:37:59 GMT

I don't know if this would help or not, but it's worth a thought. If you know the mutations that you want to use (l to 1, O to 0), you might be able to script out something that would use vi to search and replace all instances in this file
(:s/l/1/g command in vi, for example).
You could take the new list and append it to the old list so you would have all the words. It would have to be a fairly large program, though, to cover all the options. I'm not a scripting guru, so I'm not sure about how this can be done. Maybe someone out there with a lot of scripting background can tell if it is feasible.

Re: Generate word list for password cracking

Ralf Hildebrandt — Thu, 29 Mar 2001 07:23:00 GMT

http://www.users.dircon.co.uk/~crypto/

Alec Muffet's crack does what you want. It takes an arbitray number of dictionaries, permutes letters for numbers (like 3l33t being eleet being elite) and compares their crypted values with the entries in /etc/passwd

Re: Generate word list for password cracking

Alexander Peslyak — Thu, 12 Apr 2001 20:15:10 GMT

Michael,

What you're asking for is one of the features of the more advanced password crackers, including Crack and John. If for some reason you need to generate a mutated wordlist only, then the command line to use with John is:

./john -w:source-word-file -rules -stdout > mutated-word-file

and the rules are specified in john.ini (or john.conf). See john-1.6/doc/RULES for the syntax (which is an extension to that used by Crack 5).

The wordlists to use with this you may obtain at:

ftp://ftp.zedz.com/pub/crypto/wordlists/
ftp://sable.ox.ac.uk/pub/wordlists/

Re: Generate word list for password cracking

Michael Ernstoff — Tue, 17 Apr 2001 08:50:17 GMT

This looks more like what I am after (generating the mutated word list via John).
I will give it a try and then assign the points.