Wordlists & Generation

ls /usr/share/wordlists/

sudo apt install seclists
ls /usr/share/seclists/

sudo gunzip /usr/share/wordlists/rockyou.txt.gz

/usr/share/seclists/Passwords/
├── Common-Credentials/
│   ├── 10-million-password-list-top-1000000.txt
│   ├── best1050.txt
│   └── top-passwords-shortlist.txt
├── Default-Credentials/
│   └── default-passwords.csv
├── Leaked-Databases/
│   └── rockyou-75.txt
└── WiFi-WPA/
    └── probable-v2-wpa-top4800.txt

/usr/share/seclists/Usernames/
├── Names/
├── top-usernames-shortlist.txt
└── xato-net-10-million-usernames.txt

/usr/share/seclists/Discovery/
├── DNS/
│   └── subdomains-top1million-5000.txt
└── Web-Content/
    ├── common.txt
    ├── raft-large-words.txt
    └── directory-list-2.3-medium.txt

cewl https://target.com -d 3 -m 5 -w custom.txt

cewl https://target.com --auth_type basic --auth_user admin --auth_pass password -w custom.txt

git clone https://github.com/Mebus/cupp.git
cd cupp
python3 cupp.py -i

crunch <min_len> <max_len> <charset> -o wordlist.txt

# All 8-char lowercase
crunch 8 8 abcdefghijklmnopqrstuvwxyz -o lower8.txt

# Digits only, 4-6 chars
crunch 4 6 0123456789 -o pins.txt

# Pattern: Company + 4 digits
crunch 11 11 -t Company%%%% -o company.txt

# Password + 2 digits + 1 symbol
crunch 11 11 -t Password%%^ -o passwords.txt

https://github.com/sc0tfree/mentalist

hashcat --stdout -r /usr/share/hashcat/rules/best64.rule wordlist.txt > mutated.txt

# Append numbers 0-9999
for word in $(cat base.txt); do
    for i in $(seq 0 9999); do
        echo "${word}${i}"
    done
done > mutated.txt

# Capitalize + append year
sed 's/^./\U&/' base.txt | while read w; do
    for y in 2020 2021 2022 2023 2024 2025; do
        echo "${w}${y}"
        echo "${w}${y}!"
    done
done > mutated.txt

password123
Password123
Password123!
P@ssword123
Summer2024
Summer2024!
Company2024
Company2024!

# John Smith → possible usernames
echo -e "jsmith\njohn.smith\nj.smith\nsmithj\njohnsmith\nsmith.john" > users.txt

https://github.com/urbanadventurer/username-anarchy

./username-anarchy John Smith > users.txt