I'm building a common usernames and passwords list for use with THC-Hydra. I'm wondering how best to format the thing. Should I completely seperate usernames from passwords, and maintain two seperate files. Or would it be best to combine the two into a single list, since some usernames can be used as a password, and vice versa?
As you can imagine it's not a well documented procedure. I've found a few common username/password lists, but they usually have them combined into a user:pass style file. Is that the norm? Should I split off the :pass into their own passwords file, or would it be ok for hydra to use the full list, treating passwords as usernames as well?
Best way to format a username/password list?
-
- n00b
- Posts: 2
- Joined: Mon Jul 11, 2011 1:09 am
- Cool_Fire
- Not a sandwich
- Posts: 1913
- Joined: Fri May 09, 2003 1:20 pm
- Location: 41 6d 73 74 65 72 64 61 6d
- Contact:
Re: Best way to format a username/password list?
Generally you'll put usernames and passwords in a separate file, and most brute force clients will also provide you an option to try usernames as passwords too.
Putting them both in the same file, and having all username/password combinations in there might make your attack faster, if your brute force client is the limiting factor, but it'll also make the list HUGE. Generally the speed of the internet connection or the amount of tries per time unit the server allows is what limits how fast you can go, so it'll not give you a performance increase in that case.
Putting them both in the same file, and having all username/password combinations in there might make your attack faster, if your brute force client is the limiting factor, but it'll also make the list HUGE. Generally the speed of the internet connection or the amount of tries per time unit the server allows is what limits how fast you can go, so it'll not give you a performance increase in that case.
If we're breaking the rules, then how come you can't catch us? You can't find us? I know why. Cause, it's ... MAGIC!
Hackerthreads chat, where the party is going 24/7.
Hackerthreads chat, where the party is going 24/7.
-
- n00b
- Posts: 2
- Joined: Mon Jul 11, 2011 1:09 am
Re: Best way to format a username/password list?
Thanks a lot for the advice. One of the things that concerned me was how bit it might get if I started adding everything into the same file.
- Cool_Fire
- Not a sandwich
- Posts: 1913
- Joined: Fri May 09, 2003 1:20 pm
- Location: 41 6d 73 74 65 72 64 61 6d
- Contact:
Re: Best way to format a username/password list?
Well, if you have a linux machine or shell, there's some pretty easy commands you can use:
Adding all the files into one big file:
Sorting and removing double entries:
Use sort -uf if you want it to ignore upper/lowercase. Some brute force applications do these things for you.
Adding all the files into one big file:
Code: Select all
cat file1.txt >> full_list.txt
cat file2.txt >> full_list.txt
cat file3.txt >> full_list.txt
etc.
Code: Select all
sort -u full_list.txt > sorted_list.txt
If we're breaking the rules, then how come you can't catch us? You can't find us? I know why. Cause, it's ... MAGIC!
Hackerthreads chat, where the party is going 24/7.
Hackerthreads chat, where the party is going 24/7.