Penetration Testing mailing list archives

Re: Dictionary mutations code?


From: Dan Crowley <dcrowley () coresecurity com>
Date: Fri, 12 Nov 2010 12:50:05 -0500

Sounds like RSMangler would do exactly what you're looking for.

http://www.darknet.org.uk/2010/08/rsmangler-keyword-based-wordlist-generator-for-bruteforcing/

--
Daniel Crowley, CICP, GCIH
Technical Specialist
Core Security Technologies
Direct: +1 (617) 695-1151
Fax: +1 (617) 399-6987

"The worker must work for the glory of his handiwork, not simply for
pay; the thinker must think for truth, not for fame." - W.E.B. DuBois


On 11/10/2010 10:25 PM, John R. Smith wrote:
I am searching for scripts/programs that can take a word and generate a
specific type of mutations from it.

E.g. taking the input word "GreenBay" one type of mutated output would
be a list of all words where some of the applicable letters are replaced
by the "elite" speech:

6reenBay
...
Gr3enBay
Gr33nBay
...
GreenB@y
...
6r33nB@y
etc.

Are there such scripts/programs already available in public domain?
Unix command-line would be ideal, but even windows
DOS/Powershell/VBS/... are OK, too.

Clearly, with enough time, one can write something along these lines in
Perl/shell/etc. I am trying to stay moderately lazy and hopefully just
reuse a piece of code or pipe into a standalone binary that already does
this (and other) mutation(s).

Thank you in advance for any advise,
-John

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can
actually do a proper penetration test. IACRB CPT and CEPT certs require
a full practical examination in order to become certified.
http://www.iacertification.org
------------------------------------------------------------------------


------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified. 

http://www.iacertification.org
------------------------------------------------------------------------


Current thread: