基础材料来源:2021年2月新增内容>web安全培训
07 第二章--第5节--字典生成篇-hankiri2.mp4
xhydra是hydra的图形工具,本以为会很好用,但是世事艰辛
这个工具在于字典的准备,下面留个记录,准备字典的过程。
crunch生成字典:
crunch库文件位置/usr/share/crunch/charset.lst
SYNOPSIS
crunch <min-len> <max-len> [<charset string>] [options]
选项:
-o wordlist.txt
Specifies the file to write the output to, eg: wordlist.txt
-p charset OR -p word1 word2 ...
Tells crunch to generate words that don't have repeating characters.
-t @,%^
Specifies a pattern, eg: @@god@@@@ where the only the @'s, ,'s, %'s, and ^'s will change.
@ will insert lower case characters
, will insert upper case characters
% will insert numbers
^ will insert symbols
Example 1
crunch 1 8
crunch will display a wordlist that starts at a and ends at zzzzzzzz
Example 2
crunch 1 6 abcdefg
crunch will display a wordlist using the character set abcdefg that starts at a and ends at gggggg
Example 3
crunch 1 6 abcdefg\
there is a space at the end of the character string. In order for crunch to use the space you will need to escape it using
the \ character. In this example you could also put quotes around the letters and not need the \, i.e. "abcdefg ". Crunch
will display a wordlist using the character set abcdefg that starts at a and ends at (6 spaces)
Example 4
crunch 1 8 -f charset.lst mixalpha-numeric-all-space -o wordlist.txt
crunch will use the mixalpha-numeric-all-space character set from charset.lst and will write the wordlist to a file named
wordlist.txt. The file will start with a and end with " "
Example 5
crunch 8 8 -f charset.lst mixalpha-numeric-all-space -o wordlist.txt -t @@dog@@@ -s cbdogaaa
crunch should generate a 8 character wordlist using the mixalpha-number-all-space character set from charset.lst and will
write the wordlist to a file named wordlist.txt. The file will start at cbdogaaa and end at " dog "
Example 6
crunch 2 3 -f charset.lst ualpha -s BB
crunch with start generating a wordlist at BB and end with ZZZ. This is useful if you have to stop generating a wordlist in
the middle. Just do a tail wordlist.txt and set the -s parameter to the next word in the sequence. Be sure to rename the
original wordlist BEFORE you begin as crunch will overwrite the existing wordlist.
Example 7
crunch 4 5 -p abc
The numbers aren't processed but are needed.
crunch will generate abc, acb, bac, bca, cab, cba.
Example 8
crunch 4 5 -p dog cat bird
The numbers aren't processed but are needed.
crunch will generate birdcatdog, birddogcat, catbirddog, catdogbird, dogbirdcat, dogcatbird.
Example 9
crunch 1 5 -o START -c 6000 -z bzip2
crunch will generate bzip2 compressed files with each file containing 6000 words. The filenames of the compressed files
will be first_word-last_word.txt.bz2
Example 11
crunch 3 3 abc + 123 !@# -t @%^
will generate a 3 character long word with a character as the first character, and number as the second character, and a
symbol for the third character. The order in which you specify the characters you want is important. You must specify the
order as lower case character, upper case character, number, and symbol. If you aren't going to use a particular character
set you use a plus sign as a placeholder. As you can see I am not using the upper case character set so I am using the plus
sign placeholder. The above will start at a1! and end at c3#
Example 12
crunch 3 3 abc + 123 !@# -t ^%@
will generate 3 character words starting with !1a and ending with #3c
Example 13
crunch 4 4 + + 123 + -t %%@^
the plus sign (+) is a place holder so you can specify a character set for the character type. crunch will use the default
character set for the character type when crunch encounters a + (plus sign) on the command line. You must either specify
values for each character type or use the plus sign. I.E. if you have two characters types you MUST either specify values
for each type or use a plus sign. So in this example the character sets will be:
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
123
!@#$%^&*()-_+=~`[]{}|\:;"'<>,.?/
there is a space at the end of the above string
the output will start at 11a! and end at "33z ". The quotes show the space at the end of the string.
生成手机字典: