In this lecture, we're going to learn how to create a wordlist.
This is a really handy skill to have under your belt if you want to be a penetration tester, because
you're going to face a lot of scenarios where a wordless attack can become very handy.
So you can actually go ahead and look for redivert lists on the Internet.
And there is some really, really good ones.
And you should you should probably use a lot of them because some of them just have the common passwords.
But in many cases, you might actually need to create your own word.
So in this lecture, we're going to learn how you create your own wordlist using a tool called Krunch.
So using the tool is very simple.
All you have to do is just put the name of the tool and then you specify the minimum number of characters
for the passwords to be generated.
Then we're going to specify the maximum number of characters for the password.
Then you specify the characters that you want to generate passwords from.
For example, you can put all lowercase characters all uppercase, you can put numbers digits, or you
can just specify a small a smaller number to make the word list smaller.
You can also use the opportunity, which is an optional to give a pattern.
So, for example, let's say that you are looking at the person while they were typing their password
and using that the password will start with an AI.
So you can tell Crunch that the password will start with an AI and then give me all possible combinations
of passwords that start with a.
And after that, we use the minus option to specify the filename where the passwords are going to be
stored.
So we have a small little example here that will generate a list of passwords that contain that start
from six characters to eight characters and contain these characters right here.
So it's going to create combinations of one, two, three, ABC and the dollar sign and it's going to
store it in a file called.
That should be an oh, I'll fix that in a file called Wordlist, and these passwords are going to start
with an and and with a B and it'll generate passwords based on all possible combinations between the
A and B.
So all of the generated passwords will always start with A and with B.
So let's have an example of the tool now, the tool actually have a lot of options other than what we've
seen so far.
So if you just type in mine.
Krunch.
You'll see all the options that you can set and you'll see detailed description about all of these options,
so it's actually a really, really good you can go ahead and spend some time to get familiar with the
tool.
Now, I'm going to show you the example.
And based on the example, you'll be able to run all of these commands.
But if you want to run or create some advanced word lists, then I highly recommend that you go over
this.
One of the really cool options that I want to highlight is the minus option, the minus option tells
Crunch to generate passwords that don't have repeating characters.
For example, when you specify all lowercase characters you use specify ABCDE, it will start by generating
passwords made of AAA and then A B, then A BBB and all of that.
So when you do this crunchyroll actually ignore these type of passwords and it's will to create passwords
that don't have any repeating characters and that'll reduce the size of the wordlist from the number
of characters to the power of the length to the number of characters factorial.
If you scroll down, you'll actually see more examples of commands and the type of wordlist that will
be created.
So, again, you can have a look at these and get yourself familiar, familiar with once you're done
looking at the mind, you can just press cue and you'll be out of it.
And we're going to run our command here.
So we're going to use Krunch.
And I want to generate passwords of minimum of six characters and maximum of eight characters, and
I want them to contain combinations of ABC and let's say the digits one, two now and here, you can
actually keep listing things.
You can list characters, you can list uppercase characters or even symbols if you wanted to.
Once you're done with listing the characters, we're going to specify the file to save it, too, and
we're going to save it in a file called Test.
That texte.
So the command is very simple, it's crunch minimum length of the password, the maximum length of the
password, followed by the characters that we want to use to generate passwords from and then go to
the files.
The passwords are going to be stored in get hit, enter.
And as you can see now, it's telling us that it generated four hundred and forty eight thousand password's
approximately, and they're all stored in a file called Testor Texte.
Now, the size of the file is four megabytes.
And now I can open this file by doing CAD.
The text.
And as you can see now, we can see all the passwords that have been generated.
I'm going to control you out of it because it's a huge file.
And as you can see, it actually contains all possible combinations of ABC.
One, two.
I also want to show you an example of using the minority option, so I'm going to set this to only six
to six.
So it's only six characters and we're going to use the minority option, which is the Python option.
And I'm going to tell it that I want the password to always start with any.
And then I want you to feel all possible combinations of characters between the A and the B, so I want
passwords.
I start with an A and and with a B and in the middle at the outside, you can feel all possible combinations
of ABC want to get hit, enter.
As you can see now, the number of passwords is much less.
It's only 625 passwords because I've narrowed down the possibilities of passwords.
Again, if I Dukat.
Testiest, you'll see that I have all the passwords right here.
So this is it still is really useful, can be used in many scenarios.
I highly recommend that you spend some time with it and also have have a look on some of the existing
word lists out there on the Internet.