https://github.com/benbusby/namebuster

A tool for enumerating usernames from text, files, or websites
https://github.com/benbusby/namebuster

brute-force enumeration hackthebox named-entity-recognition nlp offensive-security penetration-testing pentesting user-enumeration username username-generator

Last synced: 19 days ago
JSON representation

A tool for enumerating usernames from text, files, or websites

• Host: GitHub
• URL: https://github.com/benbusby/namebuster
• Owner: benbusby
• License: mit
• Created: 2020-02-20T04:48:18.000Z (over 4 years ago)
• Default Branch: main
• Last Pushed: 2022-06-21T22:28:32.000Z (over 2 years ago)
• Last Synced: 2024-10-12T16:50:50.514Z (about 1 month ago)
• Topics: brute-force, enumeration, hackthebox, named-entity-recognition, nlp, offensive-security, penetration-testing, pentesting, user-enumeration, username, username-generator
• Language: Go
• Homepage:
• Size: 45.9 KB
• Stars: 72
• Watchers: 1
• Forks: 11
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# Namebuster

[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)

[![Tests](https://github.com/benbusby/namebuster/actions/workflows/tests.yml/badge.svg)](https://github.com/benbusby/namebuster/actions/workflows/tests.yml)

[![Go Report Card](https://goreportcard.com/badge/github.com/benbusby/namebuster)](https://goreportcard.com/report/github.com/benbusby/namebuster)

Generates a list of possible common username permutations given a list of names, a url, or a file.

## Install

Go: `go install github.com/benbusby/namebuster@latest`

Python ([PyPI](https://pypi.org/project/namebuster/) -- no longer maintained): `pip install namebuster`

## Usage

### Command Line

```bash

bb@archbtw:~$ namebuster                                            

                                                        

Usage:                                                  

namebuster                              

                                                        

Example (names): namebuster "John Broccoli, Diana Mango"

Example (url):   namebuster https://sauna.htb           

Example (file):  namebuster document.txt

```

For each discovered name, namebuster will generate ~200 possible usernames. You can then use this list with a tool like [kerbrute](https://github.com/ropnop/kerbrute), for example (originally used for the [Sauna](https://app.hackthebox.com/machines/Sauna) machine on [HackTheBox](https://hackthebox.com)):

```bash

[ benbusby : ~/test ]

$ namebuster https://sauna.htb > usernames.txt

[ benbusby : ~/test ]

$ ./kerbrute_linux_amd64 userenum ./usernames.txt -d DOMAIN.LOCAL --dc sauna.htb

    __             __               __

   / /_____  _____/ /_  _______  __/ /____

  / //_/ _ \/ ___/ __ \/ ___/ / / / __/ _ \

 / ,< /  __/ /  / /_/ / /  / /_/ / /_/  __/

/_/|_|\___/_/  /_.___/_/   \__,_/\__/\___/

Version: v1.0.3 (9dad6e1) - 02/18/20 - Ronnie Flathers @ropnop

2020/02/18 23:47:59 >  Using KDC(s):

2020/02/18 23:47:59 >  	domain.com:88

2020/02/18 23:47:59 >  [+] VALID USERNAME:	 [email protected]

2020/02/18 23:47:59 >  Done! Tested 125 usernames (1 valid) in 1.585 seconds

```