📕
Methodology
  • Pentesting Methodology
  • General
    • Abbreviations
  • Web
    • JWT
    • Cross-Site Scripting (XSS)
  • Cracking
    • Wordlists
  • Crypto
    • RSA
Powered by GitBook
On this page
  • Popular wordlists
  • Creating wordlists
  • CeWL
  • Resources

Was this helpful?

  1. Cracking

Wordlists

Information on using and creating wordlists

PreviousCross-Site Scripting (XSS)NextRSA

Last updated 4 years ago

Was this helpful?

Popular wordlists

  • rockyou.txt - /usr/share/wordlists/rockyou.txt

    • Popular for CTFs and practice machines

  • SecLists -

    • Large amount of useful lists

Creating wordlists

CeWL

CeWL is a ruby app which spiders a given url to a specified depth, optionally following external links, and returns a list of words which can then be used for password crackers such as John the Ripper.

# -d: Spider depth
# -m: Minimum word length
# -w: File to save to
# --with-numbers: If words appear with numbers, the numbers will be saved
cewl -d 3 -m 3 -w wordlist.txt --with-numbers <URL>

Resources

https://github.com/danielmiessler/SecLists/
https://tools.kali.org/password-attacks/cewl