WORDLISTS FOR PENTESTERS başlıklı kaynağın profesyonel teknik özetidir. Aşağıda belgenin ana başlık ve içerik yapısı Türkçe açıklamalarla sunulmuştur.
Page|1 www.hackingarticles.in Page|2 www.hackingarticles.in Table of Contents Abstract 3 What are Wordlists? 4 Wordlists in Kali Linux 4 Dirb Wordlists 5 Rockyou wordist 6 Wfuzz Wordlists 6 Online Wordlists 9 Github Wordlists 9 Seclists 10 Assetnode Wordlists 12 Packetstorm Wordlists 12 Cleaning Wordlists 13 Crafting Wordlists 14 Cewl 14 Crafting Wordlist: Crunch 15 Crafting Wordlists: Cupp 16 Crafting Wordlists: Pydictor 17 Crafting Wordlists: Bopscrk 17 Crafting Wordlists: BEWGor 19 Merging Wordlists: DyMerge 21 Crafting Wordlists: Mentalist 22 Hashcat/John Rules 23 Conclusion 24 References ...
24 About Us 25 Page|3 www.hackingarticles.in Abstract A Pentester is as good as their tools and when it comes to cracking the password, stressing authentication panels or even a simple directory Bruteforce it all drills down to the wordlists that you use. Today we are going to understand wordlists, look around for some good wordlists, run some tools to manage the wordlists, and much more. Ever since the evolution of Penetration Testers has begun, one of the things we constantly see is that the attacker cracks the password of the target and gets in! Well in most of the depictions of the attacks...
in movies and series often show this situation in detail as it is the simplest attack to depict. No matter how simpl e cracking passwords or performing Credential Stuffing were once a ban on the Web Applications. Today we somehow have got a bit of control over them with the use of CAPTCHA or Rate Limiting but still, they are one of the effective attacks. The soul of such attacks is the wordlist. Page|4 www.hackingarticles.in What are Wordlists? A wordlist is a file (a text file in most cases but not limited to it) that contains a set of values that the attacker requires to provide to test a m...
echanism. This is a bit complex, let’s dilute it a bit to understand better. Whenever an attacker is faced with an Authentication Mechanism, they can try to work around it but if that is not possible then the attacker has to try some well- known credentials into the Authentication Mechanism to try and guess. This list of well know credentials is a wordlist. And instead of manually entering the values one by one, the attacker uses a tool or script to automate this process. Similarly, in the case of cracking hash values, the tool uses the wordlists and encodes the entries of wordlists into the s...
ame hash and then uses a string compare function to match the hashes. If a match is found then the hash is deemed as cracked. It can be observed that the importance of wordlist is paramount in the Cyber Security World. Wordlists in Kali Linux Since Kali Linux was specially crafted to perform Penetration Testing, it is full of various kinds of wordlists. This is because of the various tools that are present in the Kali Linux to perform Bruteforce Attacks on Logins, Directories, etc. Let’s go thr ough some of the wordlists from the huge arsenal of wordlists Kali Linux contain. Wordlists are loca...
ted inside the /usr/share directory. Here, we have the dirb directory for the wordlists to be used while using the dirb tool to perform Directory Bruteforce. Then we have the dirbuster that is a similar tool that also performs Directory Bruteforce but with some additional options. Then we have a fern -wifi directory which helps to break the Wi -Fi Authentications. Then we have the Metasploit which use s wordlists for almost everything. Then there is a nmap wordlist that contains that can be used while scanning some specific services. Then we have the Rockstar of Wordlists: rockyou. This is com...
pressed by default and you will have to extract it before using it. It is very large with 1,44,42,062 values that could be passwords for a lot of user accounts on the internet. At last, we have the wfuzz directory that has the wordlists that can be used clubbed with wfuzz. Location: /usr/share/wordlists Page|5 www.hackingarticles.in Dirb Wordlists To take a closer look at one of the directories, we use the tree command to list all the wordlists inside the dirb directory. Here we have different wordlists that differ in size and languages. There is an extensions wordlist too so that the a ttacke...
r can use that directory to perform a Directory Bruteforce. There are some application -specific wordlists such as apache.txt or sharepoint.txt as well. Location: /usr/share/wordlists/dirb Page|6 www.hackingarticles.in Rockyou wordist Rockyou.txt is a set of compromised passwords from the social media application developer also known as RockYou. It developed widgets for the Myspace application. In December 2009, the company experienced a data breach resulting in the exposure of more than 32 million user accounts. It was mainly because of the company’s policy of storing the passwords in clearte...
xt. When first booting Kali Linux, it will be compressed in a gz file. To unzip run the following command. It will decompress and ready for use on any kind of attack you want. Wfuzz Wordlists Wfuzz tool was developed to perform Bruteforcing attacks on web applications. It can further be used to enumerate web applications as well. It can enumerate directories, files, and scripts, etc. It can change the request from GET to POST as well. That is helpful in a bunch of scenarios such as checking for SQL Injections. It comes with a set of predefined wordlists. These wordlists are designed to be used...
with wfuzz but they can be used anywhere you desire. The wordlists are divided into categories such as general, Injections, stress, vulns, web services , and others. Location: /usr/share/wordlists gzip -d /usr/share/wordlists/rockyou.txt.gz Location: /usr/share/wordlists/wfuzz Page|7 www.hackingarticles.in Page|8 www.hackingarticles.in Looking into the Injections directory we see that we have an All_attack.txt that is a pretty generic wordlist for testing injections. Then we have a specific one for SQL, Directory Traversal, XML, XSS injections. Moving onto the general directory, we see t hat ...
we have the big.txt that we discussed in the Dirb section. We have common.txt that also is the default wordlist in many tools due to its small size. Then we have the extensions_common.txt which contains like 25-ish extensions that might be enumerated some files that can be considered low- hanging fruits. Then we have the http_methods.txt wordlist. It contains the HTTP Methods such as POST, GET, PUT, etc. They can be used while testing if the target application has any misconfigured methods enabled or th ey forgot to disable them at the application and server level. mutations_common.txt also co...
ntains a bunch of uncommon extensions that could lead to the enumerations of rare artifacts. Then we have the spanish.txt wordlist for the as you have guessed it f or Spanish words/names/passwords. The other directory contains the common passwords and names that can be used to extract usernames or passwords at some forget password form where it responds with such messages that the user exists or it doesn’t exist. Let’s move onto the stress directory. It contains a wordlist designed to stress test the mechanism. It contains wordlists that contain the alphabets or numbers or special characters a...
Belge toplam 15 paragraf içermektedir; tam metin /root/pdf klasöründeki kaynak dosyasında mevcuttur.