Comments (13)
I've just pushed a change that will deleet the base word rather than the main word.
This:
p@ssword
P@ssw0rd1
123Pas5word22
123P@ssw0rd1
fish
pa55word
Used to go to:
password = 2 (33.33%)
passwordi = 1 (16.67%)
i2epassword22 = 1 (16.67%)
i2epasswordi = 1 (16.67%)
fish = 1 (16.67%)
Now goes to:
password = 5 (83.33%)
fish = 1 (16.67%)
from pipal.
from pipal.
Very very late reply - perhaps usable for someone having this issue as well - a comparison to dictionary words may help determining what substitutions were used (for deleet). Convert back to the potential original words, search in a custom dictionary file, and the one found is likely to have the correct base word.
from pipal.
I've just checked and I've not done anything significant to this code for 10 years! It has probably been about that long since I last touched Ruby for anything more than a few line script.
I'll see if I can remember how any of it works and make some changes.
from pipal.
I've just checked and I've not done anything significant to this code for 10 years! It has probably been about that long since I last touched Ruby for anything more than a few line script.
I'll see if I can remember how any of it works and make some changes.
Haha no worries, I didn't even expect a reply as it was so long ago (I do hope it has not been 10 years already haha! Time flies). Just wanted to share the idea, even if for archiving purposes ;)
from pipal.
from pipal.
Try the new deleet_checker
in here:
https://github.com/digininja/pipal/tree/deleet
from pipal.
I've tided up that code, done a few more little fixes, and pushed it all into the main branch.
Hopefully it is all working correctly, any problems, let me know.
from pipal.
Thanks a lot! Looking at the output of deleet, it might bring more concrete results when deleet is focusing on the base word output instead of the raw passwords. With some luck this will return 'potato' as the main base word, which can be used for creating new (client tailored) word lists. When deleet-ing those they can also be merged again (p0t4t, p0t@t, etc. => single 'potat' statistic).
Password list
potato123!
123!potato
potato!
p0t4t0
pot@t0
p0t@to2023!
Top 10 base words
potato = 4 (57.14%)
p0t4t = 1 (14.29%)
pot@t = 1 (14.29%)
p0t@to = 1 (14.29%)
Top 10 passwords (from deleet)
potato = 2 (28.57%)
potatoi2e! = 1 (14.29%)
i2e!potato = 1 (14.29%)
potato! = 1 (14.29%)
potato2o2e! = 1 (14.29%)
There will be some weird cases like 'p0tat0' => 'potat' (due to ltrim/rtrim), which would make things a bit more complicated, but I am hoping the overall result will be more in line with what to feed to the password cracker. With larger results a print all instead of top X could also be useful.
My apologies for these ideas, I tend to overcomplicate things.. :)
from pipal.
from pipal.
The base words are detected a lot better now, really useful thanks a lot! Small thing I noticed; sometimes it also prints an empty base word ("" = x%), probably because the string is empty after deleet-ing, but that doesn't really matter it's good enough for me ;)
from pipal.
from pipal.
I've just pushed a fix for this.
from pipal.
Related Issues (20)
- [OS X] Not Working Properly HOT 4
- --external option gives error HOT 5
- Nop Such File or Directory HOT 4
- Mangling HOT 14
- list_checker.rb colour refs HOT 3
- See found strings inline HOT 2
- unknown regexp option s - bac (SyntaxError) HOT 8
- Change branding/wording HOT 2
- Feature request - create base word list & de-1337 HOT 9
- Pipal lag and failure to complete analysis (RAM limitations?) HOT 10
- Masks HOT 6
- Running a Batch HOT 4
- "Dates" aren't sorted by frequency [bug?] HOT 8
- syntax error ?!!! HOT 3
- Can't find password file HOT 5
- Passing email ids [question] HOT 4
- unknown regexp options - bac (SyntaxError) HOT 12
- Output as markdown HOT 4
- Error with module HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from pipal.