-=Xploitz=- Thread To Share Wordlist

[-=Xploitz=-]

Hello everyone,

I wanted to take some time out to give back to the community, and share with you all some wordlist and dictionary's to help you with with WAP/WPA2 dictionary attacks...If you don't mind, please post links or even upload some of your own wordlist or dictionary's to rapidshare.com or Mediafire.com and post the links for us to extract them. As you all know, the key to cracking WPA/WPA2 is with a good dictionary or wordlist, because your attacks are only as strong as these list.


I'll start by posting my favorite site for wordlist..The main site is http://www.theargon.com/
there are many directories in this one, and the good ones are called webster-dictionary.txt and theargonlistver1.zip And the HUGE one is theargonlistver2.zip (2.3 GIGS!!) Now if I can only find me a program on either Linux or Windows that will let me Capitalize the first letter only with these list..that would be awesome. Mabey raptor 3 or JTR will..Ill have to find out. That way we can have a list of dictionaries with the example xploitz and Xploitz or password and Password.

What are some of your favorite wordlist & dictionary links/downloads?

[loftrat]

Originally Posted by Xploitz

Hello everyone,

[...]

Now if I can only find me a program on either Linux or Windows that will let me Capitalize the first letter only with these list..that would be awesome.

[...]

I've just started learning about shell scripting within Linux, it looks to me like this should be a fairly easy thing to do - I'll take a look tomorrow while I'm at work and see if I can work it out. If I can I'll post a script here for you.

Do you want it to take a list like:

xploitz
password
remote
backtrack
work
script
linux
windows

.....and turn it into:

Xploitz
Password
Remote
Backtrack
Work
Script
Linux
Windows

.....or into.....

xploitz
Xploitz
password
Password
remote
Remote
backtrack
Backtrack
work
Work
script
Script
linux
Linux
windows
Windows

Note though that the second one will massively increase the size of your list.

[-=Xploitz=-]

Originally Posted by loftrat

I've just started learning about shell scripting within Linux, it looks to me like this should be a fairly easy thing to do - I'll take a look tomorrow while I'm at work and see if I can work it out. If I can I'll post a script here for you.

Do you want it to take a list like:

xploitz
password
remote
backtrack
work
script
linux
windows

.....and turn it into:

xploitz
Xploitz
password
Password
remote
Remote
backtrack
Backtrack
work
Work
script
Script
linux
Linux
windows
Windows

Note though that the second one will massively increase the size of your list.

This one would be PERFECT!! Yes! I understand it will double the size of my list..but this is ok, for now. If it could be done "on the fly" though, that would be even better cause it would save space by doing 1 lowercase word converted "on the fly" to do first letter only Capitalization after the lowercase word is tried. example..

script to do

WORDS IN MY LIST ONLY

test
violet
etc

do those and then one by one alternate them automatically to do them again..but capitalize the first letter without having to create a new list of same words with first letter capitalized. (Saving the need for 2 list, 1 for uppercase, and one lowercased ...by replacing it with this method.) Doing this....

test
Test
violet
Violet
etc
Etc

but automatically ..did I make sense to you?? I got lost myself on that one..lol

[-=Xploitz=-]

I came across this script on the web...its a password generator for

alphanum=('0123456789abcdefghijklmnopqrstuvwxyzABC DEFGHIJKLMNOPQRSTUVWXYZ')

alpha = ('abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUV WXYZ')

alphacap = ('ABCDEFGHIJKLMNOPQRSTUVWXYZ')

all=('abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQR STUVWXYZ0123456789!@#$%^&*()-_+=~`[]{}|\:;"\'<>,.?/')

Heres the script....

#!/usr/bin/python
#Password generater that uses type and length.
#There are 4 types to use: alphanum, alpha, alphacap, all
#d3hydr8[at]gmail[dot]com

import random, sys

def title():
   print "\n\t   d3hydr8[at]gmail[dot]com Password Gen v1.1"
   print "\t-----------------------------------------------\n"
   
def passgen(choice, length):
   
   passwd = ""
   
   alphanum = ('0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ')
   alpha = ('abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ')
   alphacap = ('ABCDEFGHIJKLMNOPQRSTUVWXYZ')
   all = ('abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789!@#$%^&*()-_+=~`[]{}|\:;"\'<>,.?/')
   
   if str(choice).lower() == "alphanum":
      choice = alphanum

   elif str(choice).lower() == "alpha":
      choice = alpha
         
   elif str(choice).lower() == "alphacap":
      choice = alphacap
   
   elif str(choice).lower() == "all":
      choice = all
      
   else:
      print "Type doesn't match\n"
      sys.exit(1)
      
   return passwd.join(random.sample(choice, int(length)))
      
title()
if len(sys.argv) <= 3 or len(sys.argv) == 5:
   print "\nUsage: ./passgen.py <type> <length of password> <how many>"
   print "\t[options]"
   print "\t   -w/-write <file> : Writes passwords to file\n"
   print "There are 4 types to use: alphanum, alpha, alphacap, all\n"
   sys.exit(1)

for arg in sys.argv[1:]:
   if arg.lower() == "-w" or arg.lower() == "-write":
      txt = sys.argv[int(sys.argv[1:].index(arg))+2]

if sys.argv[3].isdigit() == False:
   print sys.argv[3],"must be a number\n"
   sys.exit(1)
if sys.argv[2].isdigit() == False:
   print sys.argv[2],"must be a number\n"
   sys.exit(1)
try:
   if txt:
      print "[+] Writing Data:",txt
      output = open(txt, "a")
except(NameError):
   txt = None
   pass

for x in xrange(int(sys.argv[3])):
   if txt != None:
      output.writelines(passgen(sys.argv[1],sys.argv[2])+"\n")
   else:
      print "Password:",passgen(sys.argv[1],sys.argv[2])
print "\n[-] Done\n"

[-=Xploitz=-]

Heres another link of dictionaries and different language dictionaries..etc

ftp://ftp.mirrorgeek.com/openwall/wordlists/

[sc0tch]

Now if I can only find me a program on either Linux or Windows that will let me Capitalize the first letter only with these list..that would be awesome.

awk '{ sub(/^./,toupper(substr($0,1,1))); print; }' name_of_file

Remember to pipe the output somewhere useful.


-sc0tch

[-=Xploitz=-]

Originally Posted by sc0tch

awk '{ sub(/^./,toupper(substr($0,1,1))); print; }' name_of_file

Remember to pipe the output somewhere useful.


-sc0tch

Ahh!..Thank you sc0tch!

[balding_parrot]

Damn I was just looing out my visual studio to write you a windows program to do this as my linux scripting blows chunks had to find it in all the junk here as I lost a 100Gb HD on one of my laptops at the weekend (yes it was on Fathers day)the one where it was installed along with a whole sh*tload of other files relating to pentesting and security that have taken me months to get together

And was going to give the option to choose which output type out of the first two options suggested you would like from within the program. ie two files or double sized file.

But then I suppose this is a linux forum and a linux solution would be the better option for everyone.


and just found out that the backup of that disk seems to be corrupt as well just to make it an extra kick in the teeth......

I think I am going sit back with a few cold ones and cry for a bit ...... maybe a few more than that just to be on the safe side........

[balding_parrot]

OK so time for a very quick update.

The laptop/HDD/backup situation

The HDD is most definately dead, tried it in another laptop and it is not even recognised in the bios and is making non normal noises. Tried it in an external enclosure and nothing, so I guess there is no hope except expensive solutions that I am not sure it warants.

The backup is also corrupt, will not open at all. Tried reinstalling the software used to create it and tried opening it on another computer and no luck either way.

To top that all off the laptop will not start at all now, not even with a different HDD or without a HDD at all. So I predict it will probably have an accident accidently somehow.

The windows software.

Ok so I installed VS6 on another computer and started to create an interface to open the files and there was the problem. After some investigation I could see that instead of opening the file one line at a time for processing it was opening the whole file as if it was on one line. This after lots of head scratching turns out to be that unix/linux creates text files using just a LF (line feed) between lines whereas windows will use a CRLF (carrage return + line feed) which VB6 does not interpret correctly.
As far as I could find out, unless you are using a custom control which I was unable to find any info on you are going to run into problems with this type of file. I did find some talk saying that .net will handle this better but even then they said that was still unreliable.

So it looks like I am going to have to say sorry but unless I find a solution, this is beyond me.

If you want to see this for yourself open one of the wordlists from http://www.theargon.com/ in notepad and you will see it all one line (although it will probably show as a couple of lines) with a black block between the words. Now if you open that same file in wordpad you will see it formatted with one word per line. So there is a solution but I don't what it is.

Sorry but it looks like a linux solution will be the best answer, or someone with better programming skills than my obviously limited ones are.

[Bob327]

This may be a stupid question, but I'm opening the files posted by Xploitz in kwrite, specifically theargonlistver1 (I was actually hoping to use them with John as well but it was crashing when I tried to do so, so I thought I'd give the actual file a look see), and I'm failing to understand all the incoherent rambling at the beginning of the file?