Feature request - create base word list & de-1337 about pipal HOT 9 CLOSED

from pipal.

I pretty much only encounter the substitution 'i' with 1 than 'l' so based on that just keeping one word seems to be enough (using only the most common substitution). However if there are more examples like that with multiple letters and/or you experienced the 'l' being used a lot as well, it might be a good thing to keep it configurable maybe..? Can't think of a good solution for that now though :(

from pipal.

from pipal.

How about this?

https://github.com/digininja/deleet/tree/master

from pipal.

This looks good, thnx!

Going to be so handy for creating word lists with base words. Tried on some passwords and noticed a couple of possible improvements (brain dump):

• When having a strange character in the wordlist it shows the following error and quits. Can prevent this ofcourse by cleaning up the list in advance but just want to let you know

./deleet.rb:112:in `match': invalid byte sequence in UTF-8 (ArgumentError)
	from ./deleet.rb:112:in `block in <main>'
	from ./deleet.rb:110:in `each'
	from ./deleet.rb:110:in `<main>'

• Convert string to lowercase, rules will handle uppercasing the first character etc.
• Additional substitutions: (@ > a, ! > i, ! > l)
• Perhaps an option to only output unique base words so you dont have to sort -u after
• Was thinking about possible language-based tweaks, for example if a word contains the string '1oord', the '1' is most likely an 'L" instead of a 'i' because of the double 'o'-vowels.

from pipal.

from pipal.

Yes it is indeed tricky, perhaps something like this:

!WiFi@irb4s3Rul3Z! <- Now no baseword printed by deleet

1. First strip off non-alpha chars from left to right (until first alpha char): WiFi@irb4s3Rul3Z!
2. Strip off non-alpha chars from right to left (until first alpha char): WiFi@irb4s3Rul3Z
3. Substitute chars: WiFiairbaseRuleZ
4. Convert to lowercase: wifiairbaserulez

For a password like @irb4se! this will ofcourse still result in 'irbase' but a rule placing all special chars in front of base word fixes this issue.

from pipal.

from pipal.

Moving this discussion over to the deleet project, I'm going to do some updates and will comment over here digininja/deleet#1

from pipal.