Sign in to follow this  
Eminem

Scraping Potential Passwords from a Target's Website using CeWL

Recommended Posts

Scraping Potential Passwords from a Target's Website using CeWL

[hide]

First, fire up Kali and open a terminal. Next, let's type the "cewl" command and get its help screen.

 

kali > cewl --help

 

Note the depth (-d) and the min_word_length (-m) switches. The -d switch determines how deep (the default is 2) into the website CeWL will crawl grabbing words, and the -m switch determines the minimum length of words it will grab. Since most firms have a minimum password length, there's no need to grab short words. In this case, I will be setting the minimum to 7 letters.

 

Step #2 Build a Custom List with CeWL

 

 

Now, to build a custom wordlist, we set CeWL to scraping words from the website of our friends at SANS Institute. We can do this by typing:

 

kali > cewl -w

 

customwordlist.txt -d 5 -m 7 www.sans.org

 

Let's break that down.

 

-w customwordlist.ext: the -w means write to the file name that follows.

 

-d 5: the depth (in this case, 5) that CeWL will crawl to website.

 

-m 7: the minimum word length; in this case it will grab words of 7 characters minimum.

 

www.sans.org: the website we are crawling.

 

This command will then crawl the sans.org website to a depth of 5 pages, grabbing words at least 7 letters long.

 

We can then open it with any text editor; in this case, we will use Leafpad.

 

kali > leafpad customwordlist.txt

 

Step #3 Combine This List with a List Generated by Crunch

 

Now, combine this wordlist with another wordlist, or one generated by crunch. Place these words first as they are specific to this user or company and are more likely to be correct.

[/hide]

Share this post


Link to post
Share on other sites

let's see  :fiesta: :fiesta: :fiesta: :fiesta: :fiesta:

Share this post


Link to post
Share on other sites

Scraping Potential Passwords from a Target's Website using CeWL

[align=center]

 

Will try the method

Share this post


Link to post
Share on other sites

Cracked.to is a community forum that suits basically everyone. We provide cracking tutorials, tools, combolists, marketplace and many more stuff! You can also learn many things here, meet new friends and have a lot of fun!

Share this post


Link to post
Share on other sites

Scraping Potential Passwords from a Target's Website using CeWL

[align=center]

 

Nice scraping tool

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Sign in to follow this