Was this helpful?
Was this helpful?
To conduct brute force and dictionary attacks, you can generate your own customized wordlists or use pre-compiled wordlists from the internet.
Crunch generates a custom password lists that can be used to guess passwords. These include:
CeWL is a ruby app which spiders a given URL to a specified depth, optionally following external links, and returns a list of words which can then be used for password crackers such as John the Ripper.
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
https://github.com/danielmiessler/SecLists