Generate word list for password cracking

[Michael Ernstoff]

Does anyone know of any utilities (HP-UX or Windows or DOS) which can take a list of words/phrases and mutate them in various ways to use as an input file for a password cracker.

I am thinking of things like:
Restrict number of character between x and y
Convert letter O to zero, letter L to 1, etc
Add numeric suffix to specified length e.g. pwd123, pwd134, ...
Capitalise word
Reverse word
etc, etc.

Also any good sources of word/phrase lists would be useful.

Thanks in advance

[James R. Ferguson]

Hi Michael:

Check out this:

http://www.openwall.com/john/

...JRF...

[Michael Ernstoff]

I had a look at the site you recommended.
I can see password cracking programs, and hashing algorithms, but no programs to generate / mutate the word lists.
Am I missing something?

[James R. Ferguson]

Hi Michael:

Sorry, I misunderstood the original question. Here's another link I found that, perhaps, will assist you:

http://www.multicians.org/thvv/gpw.html

...JRF...

[Michael Ernstoff]

Still not what I am looking for.
Suppose I have a list of 10,000 words/phrases.
For each of those 10,000 I want to create variations of the type
Letter to number (O to 0)
Capitalise first letter
Create numberic suffix to standard length
etc.

My output file would be a wordlist of at least tens of thousands, possibly hundreds of thousands.
I could then use this output file, as an input file to a password cracker that I already have.

[Mark Vollmers]

I don't know if this would help or not, but it's worth a thought. If you know the mutations that you want to use (l to 1, O to 0), you might be able to script out something that would use vi to search and replace all instances in this file
(:s/l/1/g command in vi, for example).
You could take the new list and append it to the old list so you would have all the words. It would have to be a fairly large program, though, to cover all the options. I'm not a scripting guru, so I'm not sure about how this can be done. Maybe someone out there with a lot of scripting background can tell if it is feasible.

[Ralf Hildebrandt]

http://www.users.dircon.co.uk/~crypto/

Alec Muffet's crack does what you want. It takes an arbitray number of dictionaries, permutes letters for numbers (like 3l33t being eleet being elite) and compares their crypted values with the entries in /etc/passwd

[Alexander Peslyak · Accepted solution]

Michael,

What you're asking for is one of the features of the more advanced password crackers, including Crack and John. If for some reason you need to generate a mutated wordlist only, then the command line to use with John is:

./john -w:source-word-file -rules -stdout > mutated-word-file

and the rules are specified in john.ini (or john.conf). See john-1.6/doc/RULES for the syntax (which is an extension to that used by Crack 5).

The wordlists to use with this you may obtain at:

ftp://ftp.zedz.com/pub/crypto/wordlists/
ftp://sable.ox.ac.uk/pub/wordlists/

[Michael Ernstoff]

This looks more like what I am after (generating the mutated word list via John).
I will give it a try and then assign the points.