字典

设备默认账号密码

List of Default PasswordsDatarecovery.com

Not found

Default Passwords Listsbizuns

/usr/share/seclists/Passwords/Default-Credentials/

Default Password Database - cirt.netcirt.net

自定义密码字典

生成密码字典

crunch

已知密码规则去生成密码字典

cewl

对目标网站进行爬取生成密码字典

cewl -d 9 megacorp-cewl.txt --with-numbers

CUPP

根据受害者的个人信息（姓名、生日等）生成密码

python3 cupp.py

密码的变形生成

wister

根据已有的字符去变形生成字典

pydictor

kwprocessor

字典生成

• 所有字符组合的纯密码爆破无法实施

• 按指定长度和字符组合规则来生成爆破密码字典（1大写+2小写+2符号+3数字）

┌──(root㉿kali)-[/home/kali]
└─$ crunch 8 8 -t,@@^^%%
Crunch will now generate the following amount of data:  172262376000 bytes
164282 MB / 160 GB

• 生成4-6字节HEX字符密码爆破字典

┌──(root㉿kali)-[/home/kali]
└─$ crunch 4 6 0123456789ABCDEF -o crunch.txt
Crunch will now generate the following amount of data: 124059648 bytes
118 MB
0 GB
0 TB
0 PB
Crunch will now generate the following number of lines: 17891328

crunch: 100% completed generating output

• 指定字符集生成密码字典

┌──(root㉿kali)-[/home/kali]
└─$ crunch 4 6 -f /usr/share/crunch/charset.lst mixalpha -o crunch.txt
Crunch will now generate the following amount of data: 140712049920 bytes
134193 MB
131 GB
0 TB
0 PB
Crunch will now generate the following number of lines: 20158125312