Penetration Testing mailing list archives
Re: word lists
From: "James W. Abendschan" <jwa () jammed com>
Date: Fri, 18 May 2001 12:30:08 -0700 (PDT)
On Thu, 17 May 2001, The Picard wrote:
Does anyone know where word lists containing commands can be found? Let me explain: during a pen-test I found a network device that has a telnet server. However, the prompt doesn't tell what it is/does nor does it appear to be an IOS-style box. More likely an embedded device. The password was trivial, however, there is little I can do with it because most commands I typed give an error back. I wrote a perl script that takes commands from a file and fed them one by one to the device through telnet, saving those that do not lead to an error to a separate file for later examination. Currently (the brute-force is still going on) I'm using 15M wordlist initially designed for password cracking.
fwiw, I've done a similar thing with a smaller dictionary: /usr/dict/words, words from Phrack issues, and the telecom digest archives ( http://massis.lcs.mit.edu/telecom-archives/archives/glossaries/ ). I also added a list of single non-word characters (!, @, #, etc) and every combination of A-Z up from 1 to 4 bytes in length. Took a while (this was over 2400 baud dialup), but it was fruitful. James
Current thread:
- [PEN-TEST] MS Exchange 5.5 and Windows NT 4 Skinner, Tim L. (May 11)
- word lists The Picard (May 18)
- Re: word lists James W. Abendschan (May 18)
- Re: word lists Jim Duncan (May 19)
- word lists The Picard (May 18)