Password Attacks
CeWL
Custom wordlist generator from target website wording.
Authorized testing only. Practice on systems you own, isolated labs, or targets with written permission. Unauthorized access is illegal.
When
Building org-specific password lists from public web content.
How
Spider site; set min word length; feed into hashcat/hydra.
Why
Custom lists beat rockyou for org-themed passwords.
Commands & usage
cewl https://example.com -m 6 -w custom.txt
cewl https://example.com -e -d 3
Commands are educational examples. Adapt hosts, paths, and rates to your authorized scope.
Tags
Related in Password Attacks
Hashcat
GPU-accelerated password recovery tool supporting hundreds of hash types.
John the Ripper
CPU-focused password cracker with jumbo community builds.
Hydra
Online password brute-forcer for many network services.
Medusa
Parallel, modular online credential brute-forcing tool.
Crowbar
Brute force tool specializing in RDP, VPN, VNC key/password attacks.
Crunch
Wordlist generator for charsets and patterns.