You can generate a custom wordlist for password cracking when you have an idea of what a password might be, and think there may be some variation on a word or phrase.
Use a rules file (found in /usr/share/hashcat/rules
)
You can chain these rules together to create a larger wordlist. I like starting with 3-4 password ideas specific to the user I am trying to crack, then using best64.rule
followed by toggles1.rule
on the result.
[[Hashcat | See more about Hashcat]] |
hashcat --force --stdout passwords -r /usr/share/hashcat/rules/toggles1.rule > passwordlist
hashcat --force --stdout passwords -r /usr/share/hashcat/rules/best64.rule > passwordlist
cat passwordlist | sort -u > passwordlist-unique
cat passwordlist | awk 'length($0) > 7' > passwordlist-eight
Pipe output to wc -l
to check how many are in the list
#cheat-sheet #cryptography