personal_wordlist_cli

personal_wordlist_cli is a CLI application based on the personal_wordlist library. It creates information aware brute-force dictionaries from patterns based on a data.

When you install the gem it will add a pwlcli command to your path.

Installation using Ruby Gems.

gem install personal_wordlist_cli

Installation using source code.

git clone https://github.com/turhn/personal_wordlist_cli.git && cd personal_wordlist_cli
bundle install
rake install:local

Output to stdout.

pwlcli generate Patternfile --datafile sample_data.json

pwlcli generate Patternfile -d sample_data.json > pwl_wordlist.txt

Output to a specified filename.

pwlcli generate Patternfile -d sample_data.json -o pwl_wordlist.txt

• Patternfile is a Ruby compatible DSL file. Check the example here.
• Datafile must be a valid json file. All json key names will be available as methods in the Patternfile.

You can use generated wordlists to brute force your WordPress for a forgotten password. WPScan is a good start.

ruby wpscan.rb --url www.example.com --wordlist pwl_wordlist.txt --username admin

You might create dictionaries to unlock zip files:

A simple zip-crack

Just change 'dictionay.txt' with the files created with the command above.

This tool is created for security intentions not for performing brute-force attacks. First intension was testing weak passwords or recovering forgotten passwords. I cannot be responsible of any misusage of the tool.

MIT

Any contributions are welcomed.