Creating custom username list wordlist for bruteforciing

Creating custom username list wordlist for bruteforciing

During brute-forcing every time you need custom  password list & username list. Username list is as well as important as password list, it should be unique for every organization.If we use traditional large number of username list , then it will be tedious process.Custom username list also useful in username enumeration.

Creating custom username list:-

(1)Jigsaw:-

During information gathering stage , you may use jigsaw script. It is great script for gathering employees `s details like fullname, position, department, email addresses.You should use script with your jigsaw credential.

some times email address`s initial can be username of employee.So you can get different username from output of jigsaw script.

(2)Username script:-

If you have full name of users then you can use username.py script to generate possible username by using different combination of first name & last name.

I also write bash script which generate possible username using first name, last name & birth date.

Creating Custom word list:-

(1)Cewl:-

Custom Word List generator. CeWL is a ruby app which spiders a given url to a specified depth, optionally following external links, and returns a list of words.

(2)Wyd:-

wyd is a password profiling tool that extracts words/strings from supplied files and directories. It parses files according to the file-types and extracts the useful information, e.g. song titles, authors and so on from mp3s or descriptions and titles from images.

(3)Cupp:-

People spend a lot of time preparing for effective dictionary attack. Common User Passwords Profiler (CUPP) is made to simplify this attack method that is often used as last resort in penetration testing and forensic crime investigations. A weak password might be very short or only use alphanumeric characters, making decryption simple. A weak password can also be one that is easily guessed by someone profiling the user, such as a birthday, nickname, address, name of a pet or relative, or a common word such as God, love, money or password.

{ Read More }

Converting Enum to List

Converting Enum to List

Method :



Usage :

{ Read More }

CR 48 Mailing List

CR 48 Mailing List

Today I woke up and I found out that I had more than 60 emails from chrome-notebook-pilot-users group. I was surprised since it is the first time I heard about that group I did not even know the pilot program had a group.

Anyways, Reading my feeds I found out I was not the only one with this little surprised. It seems that all the CR-48 NoteBook owners were automatically subscribed to this group. Seems like a good idea even though a lot of subscribers were complaining that they started receiving these emails like crazy around 3 am EST ( that is why I do not have my cellphone in my bedroom ) .

I have not finished reading the emails, first I need to delete all the SPAM. I saw a really good ones with nice tricks and tips that I will be posting here once I finish sorting and filtering the emails.

Update.- Google just sent an email apologizing and explaining what happened. It looks like they were creating a forum for all the CR-48 owners but an user found out the group and posted an message. The group configuration wasnt ready and it sent the message to everyone and that triggered a lot of responses and more mails. They deleted the group and created a new one and if we want we can subscribe. I think I will.

{ Read More }