暴⼒破解字典及字典⽣成器
GitHub上的：
⼀些博客的：
Large Password Lists: Password Cracking Dictionary’s Download For Free
by
posted on
December 9, 2016
from：/password-cracking-dictionarys-download-for-free/
For cracking passwords, you might have two choices
1. Dictionary Attack
2. Brute Force Attack.
The Dictionary attack is much faster then as compared to Brute Force Attack. (There is another method named as “Rainbow table”, it is similar to Dictionary attack).
In order to achieve success in a dictionary attack, we need a large size of Password lists.
Here is the list of 1,717,681 passwords & More (Free to download):
If you didn’t get your required password in that dictionary or file you might wanna follow our custom wordlist tutorial for .
85MB
5GB
4GB
9GB
3GB
246MB
4GB
You can find 20+ wordlists here:
Password List Download Best Word List – Most Common Passwords
from:uk/2008/02/password-cracking-wordlists-and-tools-for-brute-forcing/
Last updated: October 9, 2017 | 692,250 views
Password list download below, best word list and most common passwords are super important when it comes to password cracking and recovery, as well as the whole lection of actual leaked password databas you can get from leaks and hacks like Ashley Madison, Sony and more.
Generate your own Password List or Best Word List
There are various powerful tools to help you generate password lists or wordlists for brute forcing bad on information gathered such as documents and web pages such as:
–
–
–
–
–
The are uful resources that can add unique words that you might not have if your generic lists, using a combination of generated lists, most common passwords and leaked password databas you can generate a very powerful lection of passwords for brute force cracking.
Also, add all the company related words you can and if possible u industry-specific word lists (chemical names for a lab, medical terms for a hospital etc).
And always brute force in the native language. There are some language-specific resources below.
Password List Download Best Word Lists
Although old, one of the most complete word list ts is here (easily downloadable by FTP too):
This includes a whole bunch of language specific resources too (Afrikaans, American, Aussie, Chine, Croatian, Czech, Danish, French, German, Hindi, Japane, Polish, Russian, Spanish and more).
This is another famous pass list txt which is over 2GB uncompresd, Argon v2:
Here we have 50,000 words, common login/passwords and African words (this ud to be a great resource):
One of the most famous lists is still from Openwall (the home of ) and now costs money for the full version:
Some good lists here organized by topic including surnames, family names, given names, jargon, hostnames, movie characters etc.
Packetstorm has some good topic-bad lists including sciences, religion, music, movies and common lists.
French Spanish & Language Specific Word Lists
There’s a good French word list here with and without accents, also has some other languages including names:
Spanish password list that has 172122 words:
Russian wordlist that has 296790 words:
Swedish password wordlist that contains 24292 words:
Tools for Password List Brute Forcing
You can also check out some default password lists and if you aren’t sure what tools to u I suggest checking out:
Enjoy! And as always if you have any good resources or tools to add – do mention them in the comments.
此外，还可以使⽤crunch来⽣成密码。
crunch默认安装在kali环境中(05-Password Attacks)，Crunch可以按照指定的规则⽣成密码字典，⽣成的字典字符序列可以输出到屏幕、⽂件或重定向到另⼀个程序中，Crunch可以参数可能的组合和排列，其最新版本为3.6。并具备如下特征：
Crunch可以以组合和排列的⽅式⽣成字典
它可以通过⾏数或⽂件⼤⼩中⽌输出
现在⽀持恢复
现在⽀持数字和符号模式
现在分别⽀持⼤⼩写字符模式
在⽣成多个⽂件时添加状态报告
新的-l选项⽀持@，%^
新的-d选项可以限制重复的字符，可以通过man⽂件查看详细信息
现在⽀持unicode
Crunch其实最厉害的是知道密码的⼀部分细节后，可以针对性的⽣成字典，这在渗透中就特别有⽤，⽐如知道⽤户密码的习惯是taobao2013(taobao+数字年)，这可以通过Crunch⽣成taobao+所有的年份字典，⽤来进⾏暴⼒破解攻击其效果尤佳!
例如：⽐较有⽤的命令
(1)⽣成pass01-pass99所有数字组合
1. crunch 6 6 -t pass%% >&
(2)⽣成六位⼩写字母密码，其中前四位为pass
1. crunch 6 6 -t pass@@ >&
(3)⽣成六位密码，其中前四位为pass，后⼆位为⼤写
1. crunch 6 6 -t pass,, >&
(4)⽣成六位密码，其中前四位为pass，后⼆位为特殊字符
1. crunch 6 6 -t pass^^ >&
(5)制作8为数字字典
1. crunch 8 8 chart.lst numeric -o num8.dic
(6)制作6为数字字典
1. crunch 6 6 0123456789 –o num6.dic
(7)制作139开头的⼿机密码字典
1. crunch 11 11 +0123456789 -t 139%%%%%%%% -o num13.dic
⽂件⼤⼩为1144 MB，还可以每次⽣成⽂件⼤⼩为20M，⾃动⽣成⽂件：
1. crunch 11 11 +0123456789 -t 139%%%%%%%% -b 20mib -o START
(8)在线使⽤⽣成的密码
不⽤把庞⼤的字典保存在硬盘上，⽣成⼀个密码⽤⼀个，不过消耗的时间多，⽐较占⽤cpu，参数最后⾯的-表⽰引⽤crunch⽣成的密码，例如⽆线密码在线破解：
1.
1. crunch 2 4 0123456789 | aircrack -ng a,cap -e MyESSID -w -
2. crunch 10 1012345 --stodout | airolib -ng testdlb -import passwd –
3. crunch 1 6 0123456789 | --stdin -
