Hacking on Medium
Complex OPEN REDIRECT Exploitation

https://cdn-images-1.medium.com/max/1200/1*A9EH03_i0FfXpWsuF5ANjA.jpeg
Hi readers,

Continue reading on Medium »

Hacking on Medium
I NEED A HACKER TO CHANGE MY UNIVERSITY TRANSCRIPT

CONTACT: QULIOUSHACKER@GMAIL.COM — -IF YOU HAVE HACKING RELATED ISSUES CONCERNING HOW TO HACK AND CHANGE YOUR UNIVERSITY GRADES AND…

Continue reading on Medium »

Hacking on Medium
Pentest e Fases de um Pentest

https://cdn-images-1.medium.com/max/600/0*1OKAyMd_Ri3hd3FO.gif
Boa noite família, a um tempo atrás eu estava me aprofundando em termologias e na teoria de um teste de penetração ( ͡° ͜ʖ ͡°), ai eu…

Continue reading on Medium »

Black Hat Ethical Hacking
Insurance Giant CNA Hit with Novel Ransomware Attack

https://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Insurance Giant CNA Hit with Novel Ransomware AttackPost Views: 25
style="display:block"
data-ad-client="ca-pub-6620833063853657"
data-ad-slot="8337846400"
data-ad-format="auto"
data-full-width-responsive="true">
Reading Time: 1 Minute
A novel ransomware attack forced insurance giant CNA to take systems offline and temporarily shutter its website. The attack leveraged a new variant of the Phoenix CryptoLocker malware.
The Chicago-based company—the seventh largest commercial insurance provider in the world—said it “sustained a sophisticated cybersecurity attack” on Sunday, March 21, according to a statement on the home page of its website. The statement is the only functionality the company’s site currently maintains.

“The attack caused a network disruption and impacted certain CNA systems, including corporate email,” according to the statement.

Though the company did not elaborate on the nature of the attack, a report in BleepingComputer said CNA was the victim of a new ransomware called Phoenix CryptoLocker. Cryptolockers are an oft-used type of ransomware that immediately encrypt files on the machines they attack and demand a ransom from the victims in exchange for the key to unlocking them.

Moreover, the threat actors behind Phoenix CryptoLocker are likely known entities–the cybercrime group Evil Corp, which recently resurfaced after taking a short hiatus from cybercriminal activity, according to the report.
See Also: Microsoft Offers Up To $30K For Teams Bugs
The impact of the group’s latest attack was so serious that CNA disconnected its systems from its network “out of an abundance of caution” and is currently providing workarounds for employees where possible so the company can continue operating to serve its customers, the company said.

Sources familiar with the attack have told BleepingComputer that threat actors encrypted more than 15,000 devices on CNA’s network—including those of employees working remotely who were logged onto the company’s VPN at the time—when they deployed the new ransomware on Sunday, according to the report.

Attackers encrypted devices by appending the .phoenix extension to encrypted files and creating a ransom note named PHOENIX-HELP.txt, according to BleepingComputer.

Evil Corp has been in the crosshairs of U.S. authorities since 2019, when they offered up $5 million for information leading to the arrest of Evil Corp leader Maksim V. Yakubets, 32, of Russia, who goes under the moniker “aqua” and is known for leading a lavish lifestyle.

Indeed, the cybercrime group has reaped millions from various nefarious activities, which previously included capturing banking credentials with the Dridex banking trojan and then making unauthorized electronic funds transfers from unknowing victims’ bank accounts.
See Also: Information Security Tool: Chameleon Sources believe that Phoenix Cryptolocker is a product of Evil Corp based on similarities in the code to previous ransomware used by the group, according to the report. In previous ransomware attacks—such as one against GPS technology provider Garmin last year–Evil Corp used WastedLocker ransomware to encrypt victims’ files.

CNA aims to restore its systems using backup rather than pay the ransom demanded by attackers, according to BleepingComputer. The company is currently in the midst of an ongoing investigation into the incident that started immediately after its discovery, the company said.

“We have alerted law enforcement and will be cooperating with them as they conduct their own investigation,” the c[...]

ompany said.

CNA is unaware at this time if the incident impacted any customer data, but will notify parties directly if this is found to be the case, according to the statement. See Also: Hacking Stories: Albert Gonzalez & the ‘Get Rich or Die Trying’ Crew who stole 130 million credit-card numbersCNA also did not give a timeline for when its website and systems will be up and running in a fully operational way again. In the meantime, the company posted specific directions on its website for how its customers should contact the company during the time of disruption based on their various needs.Source: https://threatpost.com (Click Link)style="display:block"
data-ad-client="ca-pub-6620833063853657"
data-ad-slot="8337846400"
data-ad-format="auto"
data-full-width-responsive="true"> Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/Microsoft-Teams-90x90.jpg Microsoft Offers Up To $30K For Teams Bugs3 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/thrive-themes-1030x391-1-90x90.png Active Exploits Hit WordPress Sites Vulnerable to Thrive Themes Flaws4 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/HL-color-90x90.jpg Hobby Lobby Exposes Customer Data in Cloud Misconfiguration5 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/adobe_coldfusion-700x412-e1542041238507-90x90.jpg Adobe Fixes Critical ColdFusion Flaw in Emergency Update6 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/Clubhouse-e1614022265127-90x90.jpg Bogus Android Clubhouse App Drops Credential-Swiping Malware7 days ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/apple-security-90x90.jpg Trojanized Xcode Project Slips MacOS Malware to Apple Developers1 week ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/Cisco_Systems_Sign-90x90.jpg Cisco Plugs Security Hole in Small Business Routers2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/JPG-Malicious-Two-90x90.jpg Magecart Attackers Save Stolen Credit-Card Data in JPG Files2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/Google-Chrome-Browser-1-90x90.jpg Google Warns Mac, Windows Users of Chrome Zero-Day Flaw2 weeks ago
* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/internet-of-things-90x90.jpg Critical Security Hole Can Knock Smart Meters Offline2 weeks ago
The post Insurance Giant CNA Hit with Novel Ransomware Attack first appeared on Black Hat Ethical Hacking.

hacking: security in practice
How to reset terminator terminal emulator?

My terminal is so messed up (alt + tab) is not working, and few other preferences are messed up too. I tried " mv $HOME/ .config/terminator $HOME/ .config/terminator_old" But didn't work. I just wanted to erase all my previous changes I've made before.

submitted by /u/jacklsd
[link] [comments]

Hacking Articles|Raj Chandel's Blog
Wordlists for Pentester

A Pentester is as good as their tools and when it comes to cracking the password, stressing authentication panels or even a simple directory Bruteforce it all drills down to the wordlists that you use. Today we are going to understand wordlists, look around for some good wordlists, run some tools to manage the wordlists, and much more.

<o:p Table of Contents<o:p· Introduction<o:p· What are Wordlists?<o:p· Built-in Wordlists<o:po Kali Linux Wordlists<o:p

o Dirb Wordlists<o:p

o Rockyou Wordlist<o:p

o Wfuzz Wordlists<o:p

· Online Wordlists<o:po GitHub Wordlists<o:p

o Seclists Wordlists<o:p

o Assetnode Wordlists<o:p

o Packet Strom Wordlists<o:p

· Cleaning Wordlists<o:p· Crafting Wordlists<o:po CeWL<o:p

o Crunch<o:p

o Cupp<o:p

o Pydictor<o:p

o Bopscrk<o:p

o BEWCor<o:p

o Dymerge<o:p

o Mentalist<o:p

· Conclusion <o:pIntroduction<o:pEver since the evolution of Penetration Testers has begun, one of the things we constantly see is that the attacker cracks the password of the target and gets in! Well in most of the depictions of the attacks in movies and series often show this situation in detail as it is the simplest attack to depict. No matter how simple cracking passwords or performing Credential Stuffing were once a bane on the Web Applications. Today we somehow have got a bit of control over them with the use of CAPTCHA or Rate Limiting but still, they are one of the effective attacks. The soul of such attacks is the wordlist. <o:p What are Wordlists?<o:pA wordlist is a file (a text file in most cases but not limited to it) that contains a set of values that the attacker requires to provide to test a mechanism. This is a bit complex, let's dilute it a bit to understand better. Whenever an attacker is faced with an Authentication Mechanism, they can try to work around it but if that is not possible then the attacker has to try some well-known credentials into the Authentication Mechanism to try and guess. This list of well know credentials is a wordlist. And instead of manually entering the values one by one, the attacker uses a tool or script to automate this process. Similarly, in the case of cracking hash values, the tool uses the wordlists and encodes the entries of wordlists into the same hash and then uses a string compare function to match the hashes. If a match is found then the hash is deemed as cracked. It can be observed that the importance of wordlist is paramount in the Cyber Security World.<o:p Wordlists in Kali Linux<o:pSince Kali Linux was specially crafted to perform Penetration Testing, it is full of various kinds of wordlists. This is because of the various tools that are present in the Kali Linux to perform Bruteforce Attacks on Logins, Directories, etc. Let’s go through some of the wordlists from the huge arsenal of wordlists Kali Linux contain.<o:p

Wordlists are located inside the /usr/share directory. Here, we have the dirb directory for the wordlists to be used while using the dirb tool to perform Directory Bruteforce. Then we have the dirbuster that is a similar tool that also performs Directory Bruteforce but with some additional options. Then we have a fern-wifi directory which helps to break the Wi-Fi Authentications. Then we have the Metasploit which uses wordlists for almost everything. Then there is a nmap wordlist that contains that can be used while scanning some specific services. Then we have the Rockstar of Wordlists: rockyou. This is compressed by default and you will have to extract it before using it. It is very large with 1,44,42,062 values that could be passwords for a lot of user accounts on the internet.[...]

At last, we have the wfuzz directory that has the wordlists that can be used clubbed with wfuzz.<o:p Location: /usr/share/wordlists<o:phttps://1.bp.blogspot.com/-48zkdzV-ozE/YGGMrGLmQqI/AAAAAAAAvEI/t8wyej0Vjl4SoGIkk21T5LKjB3RYJH5cQCLcBGAsYHQ/s16000/1.png Dirb Wordlists<o:pTo take a closer look at one of the directories, we use the tree command to list all the wordlists inside the dirb directory. Here we have different wordlists that differ in size and languages. There is an extensions wordlist too so that the attacker can use that directory to perform a Directory Bruteforce. There are some application-specific wordlists such as apache.txt or sharepoint.txt as well.<o:p Location: /usr/share/wordlists/dirb<o:phttps://1.bp.blogspot.com/-HbFBVooiP4M/YGGMvaROCjI/AAAAAAAAvEM/W3V0y5QJsuMf2d4nCr7RWS-SGbVDLi86ACLcBGAsYHQ/s16000/2.png Rockyou Wordlist<o:pRockyou.txt is a set of compromised passwords from the social media application developer also known as RockYou. It developed widgets for the Myspace application. In December 2009, the company experienced a data breach resulting in the exposure of more than 32 million user accounts. It was mainly because of the company’s policy of storing the passwords in cleartext. <o:p Location: /usr/share/wordlists<o:pWhen first booting Kali Linux, it will be compressed in a gz file. To unzip run the following command. It will decompress and ready for use on any kind of attack you want. <o:p gzip -d /usr/share/wordlists/rockyou.txt.gz<o:phttps://1.bp.blogspot.com/-qgD4fjRbbes/YGGM0FYQM0I/AAAAAAAAvEQ/QM4nr4a2JiMRNX8jWmq42Wg6chyYCEhBACLcBGAsYHQ/s16000/3.png Wfuzz Wordlists<o:pWfuzz tool was developed to perform Bruteforcing attacks on web applications. It can further be used to enumerate web applications as well. It can enumerate directories, files, and scripts, etc. It can change the request from GET to POST as well. That is helpful in a bunch of scenarios such as checking for SQL Injections. It comes with a set of predefined wordlists. These wordlists are designed to be used with wfuzz but they can be used anywhere you desire. The wordlists are divided into categories such as general, Injections, stress, vulns, web services, and others. <o:p Location: /usr/share/wordlists/wfuzz<o:phttps://1.bp.blogspot.com/-HvEBWW9_4Bk/YGGM94x3cUI/AAAAAAAAvEY/zA_WRQLk4AYl6ExtDDtvSJZG53ZVSw8sQCLcBGAsYHQ/s16000/4.png Looking into the Injections directory we see that we have an All_attack.txt that is a pretty generic wordlist for testing injections. Then we have a specific one for SQL, Directory Traversal, XML, XSS injections. Moving onto the general directory, we see that we have the big.txt that we discussed in the Dirb section. We have common.txt that also is the default wordlist in many tools due to its small size. Then we have the extensions_common.txt which contains like 25-ish extensions that might be enumerated some files that can be considered low-hanging fruits. Then we have the http_methods.txt wordlist. It contains the HTTP Methods such as POST, GET, PUT, etc. They can be used while testing if the target application has any misconfigured methods enabled or they forgot to disable them at the application and server level. mutations_common.txt also contains a bunch of uncommon extensions that could lead to the enumerations of rare artifacts. <o:p https://1.bp.blogspot.com/-PZrcgC_IaWM/YGGNED5BrWI/AAAAAAAAvEg/E6IfIwpSosYCvO7aGyBOzRqifTFxgcjCACLcBGAsYHQ/s16000/5.png Then we have the spanish.txt wordlist for the as you have guessed it for Spanish words/names/passwords. The other directory contains the common passwords and names that can be used to extract usernames or passwords at some forget password form where it responds with such messages that the user exists or it doesn’t exist. Let’s move onto the stress directory. It contains a wordlist designed to stress test the mechanism. It contains wordlists tha[...]

t contain the alphabets or numbers or special characters and hex codes for the same. Then we have the vulns directory, which contains the wordlists specially made for testing a particular vulnerability. We have the apache wordlist, CGI wordlist, directory wordlist, iis wordlist, oracle9 wordlist, SharePoint wordlist, tomcat wordlist, and many more. Use these wordlists into a specific scenario where you are confirmed about the framework and versioning information and just use it to target a particular entry point.<o:p GitHub Wordlists <o:pWe learned about the huge collection that Kali Linux contains. But sometimes they tend to be not as latest as we require. This can happen in a scenario in which a new 0-day has been discovered. There will be no entry in those dictionaries. This is where we can go wild searching on the internet but it is vast and takes more time. This is where we can snoop in GitHub as many people might create such a dictionary. So, searching GitHub might give you those new and fresh dictionaries or it can help you find that specific dictionary that you require to fuzz a specific framework. <o:p Link: GitHub Wordlists<o:phttps://1.bp.blogspot.com/-ypqA8CBGyFc/YGGNJSskWRI/AAAAAAAAvEk/Nau59RGhLQ8p6iuJBvY-B6-vhUYVDzTgwCLcBGAsYHQ/s16000/6.png Seclists<o:pSeclists are a collection of multiple types of wordlists that can be used during Penetration Testing or Vulnerability Assessment, all collected in one place. These wordlists can contain usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, etc. To install on Kali Linux, we will use the apt command followed by the Seclists as shown in the image below.<o:p GitHub: Seclists<o:papt install seclists<o:phttps://1.bp.blogspot.com/-6CS-OJGXM2U/YGGNNyr7CgI/AAAAAAAAvEs/CJh16EqU58kFzdDNl7UgLXCLlDrGoi7lgCLcBGAsYHQ/s16000/7.png The installation will create a directory by the name of Seclists inside the /usr/share location. Going through we can see the different categories of wordlists such as Discovery, Fuzzing, IOCs, Misc, Passwords, Pattern Matching, Payloads, Usernames, and Web-Shells. <o:p https://1.bp.blogspot.com/-SJjXK-hdSTo/YGGNTOaIK7I/AAAAAAAAvEw/_x_1T5Y5cXM332s-dIzA3vWHxRyY1gt6gCLcBGAsYHQ/s16000/8.png Assetnode Wordlists<o:pThe Assetnode Wordlist releases a specially curated wordlist for a whole wide range of areas such as the subdomain discovery or special artifacts discovery. The best part is that it gets updated on the 28th of Each month as per their website. This is the next best thing that was released ever since the Seclists. To download all wordlists at once anybody can use the following wget command.<o:p Website: Assetnote Wordlists<o:pwget -r --no-parent -R "index.html*" https://wordlists-cdn.assetnote.io/ -nH<o:phttps://1.bp.blogspot.com/-bO75ELYtyTA/YGGNZGGWINI/AAAAAAAAvE8/bmwPdyhz0w824SOxBvL5z9PJOeVsGPJTwCLcBGAsYHQ/s16000/9.png PacketStrom Wordlists<o:pPacket Storm Security is an information security website that offers current and historical computer security tools, exploits, and security advisories. It is operated by a group of security enthusiasts that publish new security information and offer tools for educational and testing purposes. But much to our surprise, it also publishes wordlists. Any user that has crafter some specified wordlist can submit their wordlist on their website. So, if you are looking for a unique wordlist be sure to check it out. <o:p Link: Pack Strom Security Wordlists<o:phttps://1.bp.blogspot.com/-7d_CrAG9t2Y/YGGNeEUNg0I/AAAAAAAAvFE/fEwPWelGgHAwXT_5yB9wS5rwqgyESSLdQCLcBGAsYHQ/s16000/10.png Cleaning Wordlists<o:pTill now we saw multiple wordlists that contain thousands and thousands of entries inside them. Now during penetration testing on your vulnerable server or any CTF, it is possibly fine as they are designed to handle this kind of bruteforce but when we come t[...]

o the real-life scenario things get a little complicated. As in real life, no development team or owner is going to permit you to perform a thousand after thousand wordlist bruteforce. This can hamper its quality of service to other customers. So, we should decrease the wordlist entries. I know it sounds counterproductive but it is not. The wordlists might contain some payloads that might be exceeding 100 characters or even be too specific for them to extract anything directly. Then we do have some payloads that are the way to similar to each other that if we replace any one of them, the result remains the same. Jon Barbercreated a script that can remove noisy charters such as ! ( , %. Furthermore, tidy the wordlist so that it can be more effective. <o:p GitHub: CleanWordlist.sh<o:p./clean_wordlists.sh HTML5sec-Injections-Jhaddix.txt<o:phttps://1.bp.blogspot.com/-R_Xcf1O1vWg/YGGNkHUfJ7I/AAAAAAAAvFM/jRt_8PD-r_MdHPffTzrDfNuPQ44g1dOLQCLcBGAsYHQ/s16000/11.png We can check the lines that were removed from the HTML5 Injection wordlist using the diff command as shown in the image above. <o:p diff HTML5sec-Injections-Jhaddix.txt_cleaned < (sort HTML5sec-Injections-Jhaddix.txt) | more<o:pCrafting Wordlists: CeWL<o:pCeWL is a Ruby application that spiders a given URL to a specified depth, optionally following external links, and returns a list of words that can then be used for password crackers such as John the Ripper. CeWL also has an associated command-line app, FAB (Files Already Bagged) which uses the same metadata extraction techniques to create author/creator lists from already downloaded. Here we are running CeWL against the tart URL and saving the output into a wordlist by the name of dict.txt.<o:p GitHub: CeWL - Custom Word List generator<o:pLearn More: Comprehensive Guide on CeWL Tool<o:phttps://1.bp.blogspot.com/-4769xpvY5YM/YGGNpXKAiFI/AAAAAAAAvFU/iDD9oZQrACYvG0jvkoHwxX5MlNQYJR9xwCLcBGAsYHQ/s16000/12.png Crafting Wordlists: Crunch<o:pCrunch is a wordlist generator where you can specify a standard character set or a character set you specify. crunch can generate all possible combinations and permutations. Here, we used crunch to craft a wordlist with a minimum of 2 and a maximum of 3 characters and writing the output inside a wordlist by the name of dict.txt. <o:p Learn More: Comprehensive Guide on Crunch Tool<o:phttps://1.bp.blogspot.com/-fflTDzry-yo/YGGNuAfelAI/AAAAAAAAvFc/oS57VMjWJpItkvWOqHX2eGLdosnynxz2gCLcBGAsYHQ/s16000/13.png Crafting Wordlists: Cupp<o:pA weak password might be very short or only use alphanumeric characters, making decryption simple. A weak password can also be easily guessed by someone profiling the user, such as a birthday, nickname, address, name of a pet or relative, or a common word such as God, love, money, or password. This is where Cupp comes into use as it can be used in situations like legal penetration tests or forensic crime investigations. Here, we are creating a wordlist that is specific for a person named Raj. We enter the details and upon submission, we have a wordlist that is generated especially for this user. <o:p GitHub: CUPP - Common User Passwords Profiler<o:pLearn More: Comprehensive Guide on Cupp– A wordlist Generating Tool<o:p<o:p https://1.bp.blogspot.com/-RLXMbZmQFtc/YGGN4pz0NpI/AAAAAAAAvFk/3DMwHQfWAK0Qw9mjKkINY68Ce8LPE46XwCLcBGAsYHQ/s16000/14.png <o:p Crafting Wordlists: Pydictor<o:pPydictor is one of those tools that both novices and pro can appreciate. It is a dictionary-building tool that is great to have in your arsenal when dealing with password strength tests. The tool offers a plethora of features that can be used to create that perfect dictionary for pretty much any kind of testing situation. Here, we defined the base and length as 5 and then create a wordlist. The wordlist contains the numeric up to 5 digits[...]

. <o:p GitHub: pydictor<o:pLearn More: Comprehensive Guide on Pydictor – A wordlist Generating Tool<o:phttps://1.bp.blogspot.com/-Cv2X9Vj6QWo/YGGN-DBErbI/AAAAAAAAvFw/7iFE9EyYSOYJCH7YKiA13lmBdNapxUeRwCLcBGAsYHQ/s16000/15.png Crafting Wordlists: Bopscrk<o:pBopscrk (Before Outset PaSsword CRacKing) is a tool to generate smart and powerful wordlists for targeted attacks. It is part of Black Arch Linux for as long as we can remember. It introduces personal information related to the target and combines every word and transforms it into possible passwords. It also contains a lyric pass module which allows it to search lyrics related to the favorite artist of the target and then include them into the wordlists. <o:p GitHub: Bopscrk<o:p<o:phttps://1.bp.blogspot.com/-LLh0NuY7reQ/YGGOIiXOuCI/AAAAAAAAvF0/QG2l8EQNNzoPXhEIguVC6RWjamb4dDjdgCLcBGAsYHQ/s16000/16.png Here, we can see that the wordlist that was crafter from the details that were provided by us is neat and crafter with a high chance to be the actual password of the Raj user. <o:p https://1.bp.blogspot.com/-6bGy7-ObTmw/YGGOYWfuyUI/AAAAAAAAvGA/s6jGL-WYH4oQ5tJ7R-LYYxQL6I0o2NVpQCLcBGAsYHQ/s16000/17.png Crafting Wordlists: BEWGor<o:pFor starters, let’s begin with the pronunciation. It is pronounced as Booger. I know not easy to wrap your head around it. BEWGor is designed to help with ensuring password security. It is a Python script that prompts the user for biographical data about a person, referred to as the Subject. This data is then used to create likely passwords for that Subject. BEWGor is heavily based on Cupp but they are different in some ways as It presents vastly Increased Information Detail on Main Subject, it includes support for an arbitrary number of family members and pets, Users can use permutations to generate possible passwords. Also, BEWGor can generate huge numbers of passwords, create Upper/Lower/Reverse variations of inputted values, save raw inputted values to a Terms file before variations are generated, set upper and lower limits on output line length, and check that an inputted Birthday is valid. Birthdays must not be the future, a false leap day, June 32nd, etc.<o:p GitHub: BEWGor - Bull's Eye Wordlist Generator<o:p<o:p https://1.bp.blogspot.com/-sCgG1IVpwDE/YGGOedJ_bNI/AAAAAAAAvGE/tu23e7pAEGINlKscRZfyrWQ9nI16Tfv2ACLcBGAsYHQ/s16000/18.png After working for a while, we see that we have a refined wordlist for the user Raj. It can now be used to bruteforce the credentials of Raj. <o:p https://1.bp.blogspot.com/-lQ6xgdi5RxY/YGGOjb39JbI/AAAAAAAAvGI/b3p_7KHnwnArG1_81h1lgKwy2AVsa7w0gCLcBGAsYHQ/s16000/19.png Merging Wordlists: DyMerge <o:pA simple, yet powerful tool - written purely in python - takes given wordlists and merges them into one dynamic dictionary that can then be used as ammunition for a successful dictionary-based (or bruteforce) attack.<o:p GitHub: DyMerge - Dynamic Dictionary Merger <o:pLearn More: Comprehensive Guide on Dymerge<o:pHere, we have two wordlists: 1.txt and 2.txt. Both containing 5 entries each. We will use DyMerge to combine both wordlists.<o:p https://1.bp.blogspot.com/-uv5KNOLlF1Q/YGGOxL70dpI/AAAAAAAAvGU/vG6lpmj22c8_8JYrMOUhmhi_R1dfhO1uQCLcBGAsYHQ/s16000/20.png Running DyMerge, we provide result.txt as the wordlist to be created by merging 1.txt and 2.txt. This can be observed that the result.txt has 10 entries from both of the wordlists. <o:p https://1.bp.blogspot.com/-4ldpkAwcmIg/YGGO2qT9DXI/AAAAAAAAvGc/2j04waJjPxUuNw4KFxzVpig8LnIRoBSAgCLcBGAsYHQ/s16000/21.png Crafting Wordlists: Mentalist <o:pIt is a GUI tool for crafting custom wordlists. It uses common human paradigms for creating password-based wordlists. It can craft the full wordlist with passwords but it can also create rules compatible to be cracked with Hashcat and John the Ripper. <o:p

It generates by joining nodes which in tu[...]

rn take a shape of a chain. The initial node in the chain is called the Base Words node. Each base word is then passed to the next node in the chain as it is processed. That’s how the words get modified throughout the wordlists. After working on the chain, it finally writes the result of the chain into the file specified or converts it into the rules as per the user request.<o:p Hashcat/John Rules<o:pFor offline cracking, there are times where the full wordlist is too large to output as a whole. In this case, it makes sense to output to rules so that Hashcat or John can programmatically generate the full wordlist. Download the release from GitHub.<o:p GitHub: Mentalist<o:pWe are using Windows OS here to demonstrate the ability of Mentalist. We have chosen the English Dictionary as the Base Words. It calculates that 235,886 possible keywords can be manipulated into the passwords by taking English dictionaries as a base. Then we provide some additional options such as Case and if we want to substitute entries and If we want to add Special Character after each entry. <o:p https://1.bp.blogspot.com/-5To4dIIY_Q0/YGGO8ADL6SI/AAAAAAAAvGg/CZCfezWKlP8G5MghJ8mWx2VHM6Ti1aXhwCLcBGAsYHQ/s16000/22.png After running for a while, it has crafted a text file by the name of dict.txt. It contains all the passwords that were possible to craft as per our requirements. <o:p https://1.bp.blogspot.com/-9lJQkbr7RYk/YGGPA28RUyI/AAAAAAAAvGk/DgFGqCulr5IZx4iWT6OpnxUbVr1Wu8XdQCLcBGAsYHQ/s16000/23.png Conclusion<o:pThe point that we are trying to convey through this article is that wordlist is one of the most important assets a penetration tester can have. There are multiple resources to get a wordlist and multiple tools to craft a wordlist of your own. We wanted this article to serve as your go-to guide whenever you are trying to learn or use a wordlist or any of the tools to craft a wordlist.<o:p

<o:p

<o:p

Hacking on Medium
Trojan disguised as the android Clubhouse Version, BEWARE!

https://cdn-images-1.medium.com/max/1390/1*xhvkUTiM4BV59d9p1J9Atw.jpeg
Have you heard about the new social network application called Clubhouse? Well it’s an exclusive invite-only audio-based social network…

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖