I'm building a common usernames and passwords list for use with THC-Hydra. I'm wondering how best to format the thing. Should I completely seperate usernames from passwords, and maintain two seperate files. Or would it be best to combine the two into a single list, since some usernames can be used as a password, and vice versa?
As you can imagine it's not a well documented procedure. I've found a few common username/password lists, but they usually have them combined into a user:pass style file. Is that the norm? Should I split off the :pass into their own passwords file, or would it be ok for hydra to use the full list, treating passwords as usernames as well?