我们需要做的第一件事是从GitHub下载Wordlister 。我们可以使用wget实用程序直接从终端通过HTTP检索它:
~# wget https://raw.githubusercontent.com/4n4nk3/Wordlister/master/wordlister.py
--2020-02-24 12:45:36-- https://raw.githubusercontent.com/4n4nk3/Wordlister/master/wordlister.py
Resolving raw.githubusercontent.com (raw.githubusercontent.com)... 151.101.148.133
Connecting to raw.githubusercontent.com (raw.githubusercontent.com)|151.101.148.133|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 6195 (6.0K) [text/plain]
Saving to: ‘wordlister.py’
wordlister.py 100%[======================================================================================================================>] 6.05K --.-KB/s in 0s
2020-02-24 12:45:36 (18.5 MB/s) - ‘wordlister.py’ saved [6195/6195]
该脚本需要Python 3才能正常工作,因此,如果尚未安装,请使用以下命令进行操作:
~# apt-get install python3
~# python3 wordlister.py
usage: wordlister.py [-h] --input INPUT --perm PERM --min MIN --max MAX
[--test TEST] [--cores CORES] [--leet] [--cap] [--up]
[--append APPEND] [--prepend PREPEND]
wordlister.py: error: the following arguments are required: --input, --perm, --min, --max
我们可以附加-h标志以查看帮助菜单
~# python3 wordlister.py -h
usage: wordlister.py [-h] --input INPUT --perm PERM --min MIN --max MAX
[--test TEST] [--cores CORES] [--leet] [--cap] [--up]
[--append APPEND] [--prepend PREPEND]
A simple wordlist generator and mangler written in python.
optional arguments:
-h, --help show this help message and exit
--test TEST Output first N iterations (single process/core)
--cores CORES Manually specify processes/cores pool that you want to
use
--leet Activate l33t mutagen
--cap Activate capitalize mutagen
--up Activate uppercase mutagen
--append APPEND Append chosen word (append 'word' to all passwords)
--prepend PREPEND Append chosen word (prepend 'word' to all passwords)
required arguments:
--input INPUT Input file name
--perm PERM Max number of words to be combined on the same line
--min MIN Minimum generated password length
--max MAX Maximum generated password length
要使用Wordlister,我们首先需要一个输入文件,其中包含我们希望为其创建排列和修改的密码列表。
~# cat list.txt
password
hunter2
secret
iloveyou
现在,我们准备运行脚本。这是必需的参数:
这是完整的命令及其输出:
~# python3 wordlister.py --input list.txt --perm 2 --min 6 --max 32
secret
password
hunter2
iloveyou
secretpassword
secrethunter2
secretiloveyou
passwordsecret
passwordhunter2
passwordiloveyou
hunter2password
hunter2iloveyou
iloveyousecret
hunter2secret
iloveyoupassword
iloveyouhunter2
Wordlister也包含一些有用的可选参数。在莱特选项将任何字母转换为数字使用leetspeak:
~# python3 wordlister.py --input list.txt --perm 2 --min 6 --max 32 --leet
iloveyou
1l0v3y0u
hunter2
hunt3r2
password
p455w0rd
secret
53cr3t
iloveyouhunter2
iloveyoupassword
1l0v3y0uhunt3r2
1l0v3y0up455w0rd
iloveyousecret
1l0v3y0u53cr3t
hunter2iloveyou
hunt3r21l0v3y0u
hunter2password
hunt3r2p455w0rd
passwordiloveyou
p455w0rd1l0v3y0u
passwordhunter2
p455w0rdhunt3r2
hunter2secret
passwordsecret
p455w0rd53cr3t
secretiloveyou
hunt3r253cr3t
53cr3t1l0v3y0u
secrethunter2
53cr3thunt3r2
secretpassword
53cr3tp455w0rd
~# python3 wordlister.py --input list.txt --perm 2 --min 6 --max 32 --cap
Iloveyou
Secret
Hunter2
password
iloveyou
hunter2
secret
Password
IloveyouSecret
Iloveyouhunter2
Iloveyoupassword
IloveyouHunter2
Iloveyousecret
IloveyouPassword
SecretIloveyou
Secretpassword
Secretiloveyou
SecretHunter2
Secrethunter2
passwordiloveyou
passwordHunter2
iloveyouSecret
passwordhunter2
iloveyoupassword
passwordsecret
iloveyouHunter2
iloveyouhunter2
SecretPassword
iloveyousecret
iloveyouPassword
passwordIloveyou
passwordSecret
Hunter2Iloveyou
Hunter2Secret
Hunter2password
Hunter2secret
Hunter2iloveyou
Hunter2Password
hunter2Secret
hunter2Iloveyou
hunter2password
hunter2iloveyou
hunter2secret
secretPassword
PasswordIloveyou
hunter2Password
PasswordSecret
Passwordiloveyou
secretpassword
secretIloveyou
PasswordHunter2
Passwordhunter2
secretiloveyou
Passwordsecret
secretHunter2
secrethunter2
该向上选择将改变每个字母在单词转换成大写:
~# python3 wordlister.py --input list.txt --perm 2 --min 6 --max 32 --up
SECRET
secret
hunter2
HUNTER2
ILOVEYOU
password
PASSWORD
iloveyou
SECREThunter2
SECRETpassword
SECRETHUNTER2
SECRETILOVEYOU
SECRETPASSWORD
SECRETiloveyou
secrethunter2
secretpassword
secretHUNTER2
secretILOVEYOU
hunter2password
hunter2iloveyou
hunter2ILOVEYOU
hunter2PASSWORD
passwordSECRET
passwordHUNTER2
passwordsecret
passwordILOVEYOU
passwordhunter2
passwordiloveyou
HUNTER2SECRET
HUNTER2secret
HUNTER2ILOVEYOU
HUNTER2PASSWORD
HUNTER2password
HUNTER2iloveyou
ILOVEYOUsecret
ILOVEYOUSECRET
ILOVEYOUhunter2
ILOVEYOUpassword
secretPASSWORD
ILOVEYOUHUNTER2
secretiloveyou
hunter2SECRET
hunter2secret
ILOVEYOUPASSWORD
PASSWORDhunter2
PASSWORDSECRET
PASSWORDHUNTER2
PASSWORDsecret
PASSWORDILOVEYOU
PASSWORDiloveyou
iloveyouSECRET
iloveyousecret
iloveyouhunter2
iloveyoupassword
iloveyouHUNTER2
iloveyouPASSWORD
我们还可以将输出定向到一个文本文件,该文件稍后可用于破解:
~# python3 wordlister.py --input list.txt --perm 2 --min 6 --max 32 --leet --cap --append 1969 > mywordlist.txt