> ## Documentation Index
> Fetch the complete documentation index at: https://docs.bytejmp.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Wordlists & Generation

> Wordlist reference: default lists, custom generation with CeWL, CUPP, crunch, and mutation techniques.

## Default Wordlists (Kali)

```bash theme={"dark"}
ls /usr/share/wordlists/
```

| Wordlist                                  | Size          | Use                             |
| ----------------------------------------- | ------------- | ------------------------------- |
| `rockyou.txt`                             | 14M passwords | General purpose                 |
| `dirb/common.txt`                         | 4,614         | Web directory busting           |
| `dirbuster/directory-list-2.3-medium.txt` | 220K          | Web directory busting           |
| `fasttrack.txt`                           | 222           | Quick common passwords          |
| `seclists/`                               | Varies        | Everything (install separately) |

### Install SecLists

```bash theme={"dark"}
sudo apt install seclists
ls /usr/share/seclists/
```

### Decompress rockyou

```bash theme={"dark"}
sudo gunzip /usr/share/wordlists/rockyou.txt.gz
```

***

## SecLists Highlights

```
/usr/share/seclists/Passwords/
├── Common-Credentials/
│   ├── 10-million-password-list-top-1000000.txt
│   ├── best1050.txt
│   └── top-passwords-shortlist.txt
├── Default-Credentials/
│   └── default-passwords.csv
├── Leaked-Databases/
│   └── rockyou-75.txt
└── WiFi-WPA/
    └── probable-v2-wpa-top4800.txt

/usr/share/seclists/Usernames/
├── Names/
├── top-usernames-shortlist.txt
└── xato-net-10-million-usernames.txt

/usr/share/seclists/Discovery/
├── DNS/
│   └── subdomains-top1million-5000.txt
└── Web-Content/
    ├── common.txt
    ├── raft-large-words.txt
    └── directory-list-2.3-medium.txt
```

***

## CeWL — Custom Wordlist from Website

Crawls target website and builds wordlist from content.

```bash theme={"dark"}
cewl https://target.com -d 3 -m 5 -w custom.txt
```

| Option           | Description                |
| ---------------- | -------------------------- |
| `-d 3`           | Crawl depth                |
| `-m 5`           | Minimum word length        |
| `-w`             | Output file                |
| `--lowercase`    | Force lowercase            |
| `-e`             | Include emails             |
| `-a`             | Include metadata           |
| `--with-numbers` | Include words with numbers |

### With Authentication

```bash theme={"dark"}
cewl https://target.com --auth_type basic --auth_user admin --auth_pass password -w custom.txt
```

***

## CUPP — Common User Password Profiler

Generates targeted wordlist based on target's personal info.

```bash theme={"dark"}
git clone https://github.com/Mebus/cupp.git
cd cupp
python3 cupp.py -i
```

Interactive mode asks for:

* Name, birthdate, partner name, pet name, company, keywords
* Generates combinations, leet speak, appended numbers

***

## Crunch — Pattern-Based Generator

```bash theme={"dark"}
crunch <min_len> <max_len> <charset> -o wordlist.txt
```

### Examples

```bash theme={"dark"}
# All 8-char lowercase
crunch 8 8 abcdefghijklmnopqrstuvwxyz -o lower8.txt

# Digits only, 4-6 chars
crunch 4 6 0123456789 -o pins.txt

# Pattern: Company + 4 digits
crunch 11 11 -t Company%%%% -o company.txt
```

### Pattern Chars

| Char | Meaning   |
| ---- | --------- |
| `@`  | Lowercase |
| `,`  | Uppercase |
| `%`  | Digits    |
| `^`  | Symbols   |

```bash theme={"dark"}
# Password + 2 digits + 1 symbol
crunch 11 11 -t Password%%^ -o passwords.txt
```

***

## Mentalist — GUI Wordlist Generator

```bash theme={"dark"}
https://github.com/sc0tfree/mentalist
```

Chain rules visually: base words → append → case → leet.

***

## Mutation / Rules

### Hashcat Rules on Wordlist

```bash theme={"dark"}
hashcat --stdout -r /usr/share/hashcat/rules/best64.rule wordlist.txt > mutated.txt
```

### Quick Manual Mutations

```bash theme={"dark"}
# Append numbers 0-9999
for word in $(cat base.txt); do
    for i in $(seq 0 9999); do
        echo "${word}${i}"
    done
done > mutated.txt

# Capitalize + append year
sed 's/^./\U&/' base.txt | while read w; do
    for y in 2020 2021 2022 2023 2024 2025; do
        echo "${w}${y}"
        echo "${w}${y}!"
    done
done > mutated.txt
```

### Common Patterns to Generate

```
password123
Password123
Password123!
P@ssword123
Summer2024
Summer2024!
Company2024
Company2024!
```

***

## Username Wordlists

### Generate from Name

```bash theme={"dark"}
# John Smith → possible usernames
echo -e "jsmith\njohn.smith\nj.smith\nsmithj\njohnsmith\nsmith.john" > users.txt
```

### username-anarchy

```bash theme={"dark"}
https://github.com/urbanadventurer/username-anarchy

./username-anarchy John Smith > users.txt
```

***

## Quick Reference

| Tool                  | Purpose                                    |
| --------------------- | ------------------------------------------ |
| `rockyou.txt`         | General password cracking                  |
| `SecLists`            | Everything — passwords, dirs, DNS, fuzzing |
| `CeWL`                | Build wordlist from target website         |
| `CUPP`                | Targeted list from personal info           |
| `crunch`              | Pattern-based generation                   |
| `hashcat --stdout -r` | Apply rules to existing wordlist           |
| `username-anarchy`    | Generate usernames from names              |