crunch
Ferramenta para geração de wordlists.
Gerando Wordlists Simples
Gerando senhas de 4 dígitos numérico:
crunch 4 4 0123456789 -o pin.txt
O primeiro argumento (4) representa o tamanho mínimo da senha e o segundo
argumento (4) representa o tamanho máximo da senha.
Gerando Wordlists com Padrões
Gerando senhas com máscara:
crunch 10 10 -t usuario^%% -o pass_user.txt
Exemplo de saída:
usuario@56
@ = minúscula
, = maiúscula
% = números
^ = caracteres especiais
Trabalhando com Charsets
Caminho padrão do charset.lst: /usr/share/crunch/charset.lst.
Utilizando charset:
crunch 6 6 -f charset.lst numeric
Charsets Padrões
hex-lower:
[0123456789abcdef]
hex-upper:
[0123456789ABCDEF]
numeric:
[0123456789]
numeric-space:
[0123456789 ]
symbols14:
[!@#$%^&*()-_+=]
symbols14-space:
[!@#$%^&*()-_+= ]
symbols-all:
[!@#$%^&*()-_+=~`[]{}|\:;"'<>,.?/]
symbols-all-space:
[!@#$%^&*()-_+=~`[]{}|\:;"'<>,.?/ ]
ualpha:
[ABCDEFGHIJKLMNOPQRSTUVWXYZ]
ualpha-space:
[ABCDEFGHIJKLMNOPQRSTUVWXYZ ]
ualpha-numeric:
[ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789]
ualpha-numeric-space:
[ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789 ]
ualpha-numeric-symbol14:
[ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789!@#$%^&*()-_+=]
ualpha-numeric-symbol14-space:
[ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789!@#$%^&*()-_+= ]
ualpha-numeric-all:
[ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789!@#$%^&*()-_+=~`[]{}|\:;"'<>,.?/]
ualpha-numeric-all-space:
[ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789!@#$%^&*()-_+=~`[]{}|\:;"'<>,.?/ ]
lalpha:
[abcdefghijklmnopqrstuvwxyz]
lalpha-space:
[abcdefghijklmnopqrstuvwxyz ]
lalpha-numeric:
[abcdefghijklmnopqrstuvwxyz0123456789]
lalpha-numeric-space:
[abcdefghijklmnopqrstuvwxyz0123456789 ]
lalpha-numeric-symbol14:
[abcdefghijklmnopqrstuvwxyz0123456789!@#$%^&*()-_+=]
lalpha-numeric-symbol14-space:
[abcdefghijklmnopqrstuvwxyz0123456789!@#$%^&*()-_+= ]
lalpha-numeric-all:
[abcdefghijklmnopqrstuvwxyz0123456789!@#$%^&*()-_+=~`[]{}|\:;"'<>,.?/]
lalpha-numeric-all-space:
[abcdefghijklmnopqrstuvwxyz0123456789!@#$%^&*()-_+=~`[]{}|\:;"'<>,.?/ ]
mixalpha:
[abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ]
mixalpha-space:
[abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ ]
mixalpha-numeric:
[abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789]
mixalpha-numeric-space:
[abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789 ]
mixalpha-numeric-symbol14:
[abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789!@#$%^&*()-_+=]
mixalpha-numeric-symbol14-space:
[abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789!@#$%^&*()-_+= ]
mixalpha-numeric-all:
[abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789!@#$%^&*()-_+=~`[]{}|\:;"'<>,.?/]
mixalpha-numeric-all-space:
[abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789!@#$%^&*()-_+=~`[]{}|\:;"'<>,.?/ ]
Charsets Suécos
ualpha-sv:
[ABCDEFGHIJKLMNOPQRSTUVWXYZÅÄÖ]
ualpha-space-sv:
[ABCDEFGHIJKLMNOPQRSTUVWXYZÅÄÖ ]
ualpha-numeric-sv:
[ABCDEFGHIJKLMNOPQRSTUVWXYZÅÄÖ0123456789]
ualpha-numeric-space-sv:
[ABCDEFGHIJKLMNOPQRSTUVWXYZÅÄÖ0123456789 ]
ualpha-numeric-symbol14-sv:
[ABCDEFGHIJKLMNOPQRSTUVWXYZÅÄÖ0123456789!@#$%^&*()-_+=]
ualpha-numeric-symbol14-space-sv:
[ABCDEFGHIJKLMNOPQRSTUVWXYZÅÄÖ0123456789!@#$%^&*()-_+= ]
ualpha-numeric-all-sv:
[ABCDEFGHIJKLMNOPQRSTUVWXYZÅÄÖ0123456789!@#$%^&*()-_+=~`[]{}|\:;"'<>,.?/]
ualpha-numeric-all-space-sv:
[ABCDEFGHIJKLMNOPQRSTUVWXYZÅÄÖ0123456789!@#$%^&*()-_+=~`[]{}|\:;"'<>,.?/ ]
lalpha-sv:
[abcdefghijklmnopqrstuvwxyzåäö]
lalpha-space-sv:
[abcdefghijklmnopqrstuvwxyzåäö ]
lalpha-numeric-sv:
[abcdefghijklmnopqrstuvwxyzåäö0123456789]
lalpha-numeric-space-sv:
[abcdefghijklmnopqrstuvwxyzåäö0123456789 ]
lalpha-numeric-symbol14-sv:
[abcdefghijklmnopqrstuvwxyzåäö0123456789!@#$%^&*()-_+=]
lalpha-numeric-symbol14-space-sv:
[abcdefghijklmnopqrstuvwxyzåäö0123456789!@#$%^&*()-_+= ]
lalpha-numeric-all-sv:
[abcdefghijklmnopqrstuvwxyzåäö0123456789!@#$%^&*()-_+=~`[]{}|\:;"'<>,.?/]
lalpha-numeric-all-space-sv:
[abcdefghijklmnopqrstuvwxyzåäö0123456789!@#$%^&*()-_+=~`[]{}|\:;"'<>,.?/ ]
mixalpha-sv:
[abcdefghijklmnopqrstuvwxyzåäöABCDEFGHIJKLMNOPQRSTUVWXYZÅÄÖ]
mixalpha-space-sv:
[abcdefghijklmnopqrstuvwxyzåäöABCDEFGHIJKLMNOPQRSTUVWXYZÅÄÖ ]
mixalpha-numeric-sv:
[abcdefghijklmnopqrstuvwxyzåäöABCDEFGHIJKLMNOPQRSTUVWXYZÅÄÖ0123456789]
mixalpha-numeric-space-sv:
[abcdefghijklmnopqrstuvwxyzåäöABCDEFGHIJKLMNOPQRSTUVWXYZÅÄÖ0123456789 ]
mixalpha-numeric-symbol14-sv:
[abcdefghijklmnopqrstuvwxyzåäöABCDEFGHIJKLMNOPQRSTUVWXYZÅÄÖ0123456789!@#$%^&*()-_+=]
mixalpha-numeric-symbol14-space-sv:
[abcdefghijklmnopqrstuvwxyzåäöABCDEFGHIJKLMNOPQRSTUVWXYZÅÄÖ0123456789!@#$%^&*()-_+= ]
mixalpha-numeric-all-sv:
[abcdefghijklmnopqrstuvwxyzåäöABCDEFGHIJKLMNOPQRSTUVWXYZÅÄÖ0123456789!@#$%^&*()-_+=~`[]{}|\:;"'<>,.?/]
mixalpha-numeric-all-space-sv:
[abcdefghijklmnopqrstuvwxyzåäöABCDEFGHIJKLMNOPQRSTUVWXYZÅÄÖ0123456789!@#$%^&*()-_+=~`[]{}|\:;"'<>,.?/ ]
Você pode criar o seu próprio charset.
Crunch e Outros Aplicativos
Crunch e aircrack-ng:
crunch 2 4 abcdefghijklmnopqrstuvwxyz | \
aircrack-ng /root/Mycapfile.cap -e MyESSID -w-
Crunch e airolib-ng:
crunch 10 10 12345 --stdout | \
airolib-ng testdb -import passwd -