Help with Crunch syntax

[hongman]

Hi

I am trying to understand the correct syntax for Crunch but I just cant get my head around it lol - hoping someone can help.

If my "keyword" is "password" I want crunch to generate all permutations of the word "password" including up to 3 any-char's before and after the word.

Examples of what I mean

000password000
000password001
..
###password###
###password##~
###password##}
...
!"£PASSWORD001
*^$p@55w0rD1?!
...

Is this even possible with Crunch?

[TAPE]

Well part of what you want is possible with crunch, but not all..


To have 3 characters (including space) prefixed and suffixed to a word, in this case "password"
you could do that as follows ;

./crunch 14 14 -f charset.lst mixalpha-numeric-all-space -t @@@password@@@

This will fix the word password with the variables only being the first 3 and last 3 characters
so not creating any permutations of the word "password".

[hongman]

Thanks Tape (hmm I think I referred to your blog on WPS?)

Are there any tools out there which I could use to create permutations of a certain word?

[TAPE]

Possibly

You may have already seen it, but I made a fairly comprehensive post
on the usage of crunch as well which may help you.


I have been looking for a tool that will do something like that as well, but to be honest have not had much luck in finding one
that does all I would like.
Am half wondering about trying to write something up, but a bit stumped so far

CUPP may help you a bit but it wont do all you are asking for.

[hongman]

Thanks Tape!

Let me know if you do find something that does all of that, as will I if I stumble upon a useful tool.

[TAPE]

Actually if you do a bit of digging here on the forums you should find a script that Gitsnik put up a while
ago called permute.pl which does do this I believe.

Do a search for Password Cracking Guide by bofh28 and the (slightly modified) script should be
detailed in his latest version of that as well.

[mas81]

hi tape, trying to get wpa2 for talktalk routers i no that all talktalks routers have a 8 characters long upper case and numeric characters
im trying to do a wordlist with crunch (i read your blog and i grabed a beverage im still a lil bit stuck
this is what im inputting on terminal = /pentest/passwords/crunch/crunch 8 8 0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ -o talktalk.txt = is this rite?
i left it running all night in the mornning it had stoped but i can not find the file anywere is the Crunch syntax i used the rite one to create on save list?

thanks in adv

p.s sorry for posting here did not no were else to post

[TAPE]

Hey mas81,
Yes you are doing it correctly..

./crunch 8 8 -f charset.lst ualpha-numeric -o talk.txt

BUT

root@bt:/pentest/passwords/crunch# ./crunch 8 8 -f charset.lst ualpha-numeric
Crunch will now generate the following amount of data: 25389989167104 bytes
24213780 MB
23646 GB
23 TB
0 PB
Crunch will now generate the following number of lines: 2821109907456

I guess you can figure out why it stopped ..

[thad0ctor]

if you want to attack a network with the current parameters you listed (8 chars, alpha numeric) you best bet would be to passthrough the crunch results directly to aircrack or pyrit so it doesn't take up 23TB of HDD space.

if you are trying to create a word list with the permutations of: @@@password@@@ your best bet would be to first create the wordlist with crunch and then use a manging script to 1337ify the word list. You can do this with my script I released and any number of other scripts out there.

[mas81]

hi tape, thad0ctor , thanks for answers

I guess you can figure out why it stopped ..[/QUOTE]
i need more space

just got one more thing if any of you can help me can you tell me the correct syntax to pipe crunch to aircrack with my handshake file please

thanks