Generally word lists available with password cracking programs or the word list that you can download
from the Internet are used for general purposes.
They have lots of random passwords on top of that.
They are huge in size.
For example you can search on the internet for a wordless cold dark coat and another famous wordless
cold drop you.
This contains more than 14 million passwords that are compliant.
The latest password policies.
Suppose that you want to tailor your own or list for a special kind of attack for this purpose will
be using tool tools.
The first one is called crunch which is available principled with.
And the second tool is called cup.
You can go to the Internet and search for Cup on GitHub which is a common use of password profiler and
you will go to this page just copy the link from here.
Go to your copy machine open the terminal and write the command get clone then paste the up and wait
for it to be cloned on your local machine just to see invoke the Ellis command.
And here you go.
It has created a directory called TPP.
Just go to this directory again list you'll see the files populated here.
We're interested to invoke this file here.
You write by form then the name of the file that be Y.
And if the argument of Dash I this will prompt you with lots of questions.
So basically this tool will gather information about the target and will use this information to generate
its own wordless.
So let's see in the example suppose the name of the victim is John and the surname is Scott.
The nickname is Johnny the birth date is one March nineteen eighty.
His partner's name is Ryan.
Her nickname is red.
Her birth date is 2 5 nineteen eighty five their child's name is Will the child's nickname is Willy
the birth date is 5 7 nineteen ninety nine.
That's name is thumb.
Company name is just a random company name
innovate or do you want to add some keywords to the victim.
If you have some keywords like he is you can describe him he he's handsome.
He works in the technology field.
So just imagine some of the words that this victim might be using.
You want to add special characters to the end of the word.
Yes you want to add some random numbers to the end of the word.
Yes.
Lead mode.
You enable the.
More.
Yes or no lead.
What is actually the usage of ASCII characters to replace Latin characters in ways that it reflects
a resemblance.
So as you can see here 1 3 3 7 it resembles lead.
And if I write for example password like this it's I'm using delete because the zero resembles the oh
and the app resembles the eight.
So I will say yes and it'll take some time to generate the word lists containing more than 60000 words.
So let's open this list.
It's called John Doe to exceed I'll use leaf pad to open John the text.
And here you go.
This is the list containing all the permutations and all the combinations of the information provided
to the victim.
So probably the victim might be using one of these permutations because the password you use usually
are.
Include your name family name your pets name birthdate your partner's name etc. So this will help you
do a more successful attack with high probability of guessing the password.
Now moving to crunch just type crunch and hit enter and you will see the syntax on how to run it.
You will specify the minimum length of the bus what you want and the maximum length of the password
you want.
If you hit enter it will use the default character set of Alpha lowercase.
So just as hit enter and now it will generate a huge award list containing more than a million password.
So I'll just stop here to make things easier.
You can specify the character set that you want.
In this case I'll use the character set of A B C D hit enter.
It will only use these character sets to generate the password with minimal for maximum 5.
And here are the results.
If you want to include numbers as well you can add it to the character set to hit enter and you will
see the result.
You can as well export this file by using the argument of 0 and then just rename it my word list.
Steve will just redirect the output to the file.
You can see it here.
Cubicle all only combinations and the possibilities from the character said you have chosen now to make
things more interesting.
Suppose that we want to add a pattern to the password that turns we have to use symbols special symbols
add to specify lowercase comma to specify uppercase percent assigned to specify numbers and the scientist
specify symbols.
Suppose that my pattern will be in the password which is let's say here is a four character password.
This make it easier for you to understand.
I will use.
I will always start with lowercase and then I want to use number and then uppercase and I want my password
always to end with the letter Z.
OK so we have a four letter password here that the length of the password is four.
This is the character set I'm choosing from and the pattern is for characters.
The first character is lowercase.
Then number that uppercase and a standard z.
So let's see how it goes.
It will generate one thousand eight hundred twenty password.
And here are all the permutations.
Let's take this to an output file to make it easier
and open that and here we go as we specified here.
So the first letter is lowercase then no all the time then uppercase.
Then Z.
And these are all the possible combinations.
Of course you can make it more complex by using longer passwords and by using an extended character
set for this purpose.
And as we've seen with rainbow tables before the character set is found in a table or in a file called
cast said the DST.
Actually this is the one.
So let's see the content of this file.
And here you go it has all the character sets numeric the alphanumeric but alpha and the letter from
numeric and the mixed Alpha et cetera.
So let's use this file in order to generate award lists and crunched.
So we'll use the same command here.
Will need this and I will delete this for the time being and just invoke the F argument to specify the
file again.
And now we need to specify the character set name again.
Let's open it and leave that.
And remember a character set thing for example.
It's loaded Alpha dash numeric.
OK.
So let's go to the command again and right lower Alpha dash numeric.
So it will use the lower Alpha decimated character sets from this file and let's output this file to
ramble word the DST.
And on top of that let's zip it by using the Z argument and using the guns of utility.
So just press enter and wait for the result.
Here we go.
It has created this file here
ramble wordless.
The deal with all the permutations and all the combinations from the lower alpha numeric characters
set on is this fire and all the passwords of the length of four characters.
So let's see that you go to room and just double click on that file.
And here you go all the character or the passwords are the length of four with all the combinations
from the chosen the set.