Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/nyxgeek/dumpsniffer
tools for analyzing strings from password lists
https://github.com/nyxgeek/dumpsniffer
derbycon password-analysis password-cracking password-dump passwords regex
Last synced: about 2 months ago
JSON representation
tools for analyzing strings from password lists
- Host: GitHub
- URL: https://github.com/nyxgeek/dumpsniffer
- Owner: nyxgeek
- Created: 2017-09-23T21:17:17.000Z (over 7 years ago)
- Default Branch: master
- Last Pushed: 2022-08-15T03:31:12.000Z (over 2 years ago)
- Last Synced: 2024-08-05T09:15:31.706Z (5 months ago)
- Topics: derbycon, password-analysis, password-cracking, password-dump, passwords, regex
- Language: Shell
- Size: 15.5 MB
- Stars: 57
- Watchers: 9
- Forks: 5
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
- awesome-network-stuff - **47**星
README
# dumpsniffer
tools for analyzing strings from password lists
### quickstart / setup
```
git clone https://github.com/nyxgeek/dumpsniffer.git
cd dumpsniffer;chmod +x *.sh
./getcleanwordlist.sh
```
this will download cracked passwords from Troy Hunt's public dump, via hashes.org (The wordlist source file can be changed in ./dumpsniff.conf)
once a wordlist is in place:
```
./popcon.sh baseball basketball football
```
or
```
./viewresults.sh hacktheplanet
```
---
### overview
- this project is meant to look at one password dump (or any text file) at a time.
- If you want to start again, just rename the ./db folder to something else.
- There is a dumpsniff.conf file that contains the path to the password dump to be searched.
The search results are stored in their raw form under the following directory structures:
```
./db/
./db/a/
./db/a/aardvark.out.txt
./db/a/awesome.out.txt
./db/b/bitcoin.out.txt
./db/c/computer.out.txt
...
```
Using the filesystem to hold data was chosen over a traditional db because this allows the easy viewing and editing of the results. This allows you to manually parse and remove false-positive results using tools like 'grep'.
---
### derbycon 7.0 talk info
The DerbyCon 7.0 (2017) slide deck can be found here:
https://github.com/nyxgeek/dumpsniffer/raw/master/DerbyCon_Files/DerbyCon7.0_100MillionSecrets.pdf
The video can be found here:
http://www.irongeek.com/i.php?page=videos/derbycon7/s31-statistics-on-100-million-secrets-a-look-at-recent-password-dumps-nyxgeek
(youtube here: https://www.youtube.com/watch?v=DHpbEl27sdQ )
Resources listed in slide deck can be found here:
https://github.com/nyxgeek/dumpsniffer/blob/master/DerbyCon_Files/resources.md
---
### where to find passwords in plaintext:
https://hashes.org/public.php
Check out the 'found' column.
You can automagically download and clean the Troy Hunt dump using the included script 'getcleanwordlist.sh'
```
./getcleanwordlist.sh
```
***Please consider donating to hashes.org***
I'm not affiliated with them in any way, don't know them, but they're an awesome resource. You can find the donation link at the bottom of this page:
https://hashes.org/index.php
---
### file list & usage
#### popcon.sh
Popularity Contest: compare popularity of keywords or phrases
note: if a word is already in the db, it won't be searched again
```
usage:
./popcon.sh hacking hacker hacked
Search complete:
19993, hacker
2805, hacked
1799, hacking
```
#### viewresults.sh
show top 50 most-popular variations on a keyword
note: if word has not been searched for yet, will prompt to search
```
usage:
./viewresults.sh hacking
1066 hacking
61 hackingme
16 hackings
12 hackingyou
12 hackingisfun
10 hackingmaster
10 hackingm
8 hackinghaters
8 hackingaccount
7 hackingis
...
```
#### createregex.sh
```
usage:
./createregex.sh file.txt > file.regex
Read line "testing":
[tT+7][eE3][sS$5][tT+7][iI1!|][nN][gG69]
```
give this script a file with one word/phrase per line and it will convert output it as leetspeak regex
This can then be used with grep in the following manner:
```
grep -E -f file.regex file_to_search.txt
```
#### getcleanwordlist.sh
```
usage:
./getcleanwordlist.sh
```
That's it. It downloads and cleans the wordlist a little (trims lines longer than 24 char and removes non-ASCII).
#### DerbyCon_Files folder
##### DerbyCon_7.0_100_Million_Secrets.pdf
PDF of slide deck
#### cleverbrute_create.sh
script to turn a wordlist into two wordlists to be used in CLEVERBRUTE attack method
```
usage:
./cleverbrute_create.sh wordlist.txt
Making HEAD file... file written to /current/path/HEAD.out - Total lines: 21
Making TAIL file... file written to /current/path/TAIL.out - Total lines: 24
Example (first 5 lines):
HEAD.out TAIL.out
-------- --------
1234 !!!!
12345 !!!!n
123456 !!!!ni
Spri !710
Sprin !7102
```
##### resources.md
This is a list of the URLs/resources listed in the slide deck
---
### thanks!
thanks for all the feedback! also special thanks to whoever it was at DerbyCon that recommended the dog icon after my talk.
@nyxgeek