Gen2k – Automated Wordlist Generator

So, I’ve decided to brush up on my python skills and make something useful.

Enter: Gen2k

gen2k

What is it?

It’s an automated word list generator.

What is a word list?

Word list is like a list of possible passwords that you can use to crack hashes with, perform brute force attacks on various protocols & may be used for just about any cracking in general.

Why would I need an automated word list generator?

Well, actually you don’t need to generate your own as there are already some pretty good word lists floating around on the web. But there are times when you would want a personalized word list to fine tune your attacks; especially if you know the target well. In such cases automated word list generators may come in handy as it allows you to make educated guesses regarding what the password might be rather than just brute forcing with totally random, irrelevant word list.

How is it different?

Gen2k is still in beta, but works flawlessly as of now. It’s not your typical word list generator, and doesn’t intend to be one. There are already good ones out there like Crunch, etc.

Gen2k aims to be a smart word list generator, it takes sample words as input. Sample words can be anything that you know about the target, from area, date of birth to names & special events, etc. Once a list of all those known words have been supplied to Gen2k, it automatically, based on the options set..determines the best possible way to make a word list out of those. As many of you know, people tend to use birth year, specific dates, random numbers, custom words attached to simple words in order to make their passwords more complex. Gen2k aims to exploit those types of weaknesses along with conversion of words to upper & lower cases to make your word list completely personalized & appropriate for the situation.

It has most of the features that I thought of implementing when I started working on it and obviously it can be improved further. It’s written completely in Python. It’s fast, light weight & doesn’t have any external dependencies.

What are it’s features?

* Generates password combinations by combining supplied words.
* Mixes frequently used number patterns with words.
* Generates password combinations using year/date combo.
* Mixes custom user defined value(s) combination with words.
* Option to auto convert words to upper/lowercase & capitalisation.
* WPA/WPA2 password validation check.
* No external dependencies.

So what does it look like?

gen2k

The list can get very large indeed, so make sure you choose the options wisely.

Where can I get it?

Gen2k-git

Want more features? Found a serious bug that needs fixed? Need more updates?

Feel free to comment below & let me know! 🙂

Cooking with Beautiful Soup

Hey guys, today I’ll be showing you a simple example on how to use Beautiful Soup to scrape data. To be more specific we will be looking at an open public forum and just extract all the thread’s title on the first page followed by some meta-data like author, post date, etc.

What is BeautifulSoup?

Well in simple words it’s a Python module that can be used for webscraping, data Mining, and for all your parsing needs.

Why should I consider using it?

To be honest there are a lot of parsers out there for Python…lxml, SGML, etc. but the main feature of Beautiful Soup is that  it’s quite easy to use and developer friendly; you can easily construct a few expressions and with just a few lines of code you can get your job done. Aim of Beautiful Soup is mainly to be developer friendly, but performance wise may be it’s not the best. If performance is your main aim, then other C based parsers like lxml might fit your bill.

Anyway let’s proceed with using Beautiful Soup!

The script that I’ve released here is coded in such a way so that it’s not intrusive, and only makes a single request just like any other user who is viewing the forum.

First of all you will need Python 2.7 or earlier installed along with the appropriate version of “Beautiful Soup”.

View/Download the script from here –> http://pastebin.com/3wrnDw12

Link to the forum we want to scrape –> http://forum.intern0t.net/perl-python/

As you can see the code is pretty simple and self explanatory. Beautiful Soup makes it quite easy to refer to different types of tags using various attribute values and we can easily play around with different nodes to get to the data we want.

If you run the script this is what you’ll see:

See how simple it is? It only took 5-6 lines of code related to Beautiful Soup to achieve that. This is something that made me fall in love Python; it’s simply too elegant and simple.

In the past before I knew Beautiful Soup, I used regular expressions mainly to get the job done. Regular expressions are great for complex tasks, you can even use Regex with in Beautiful Soup itself if you feel like doing so.

Anyway for those of you who are new to Beautiful Soup I would recommend playing around with the code and learning it through your personal experience.

Don’t forget to look at the Official Beautiful Soup Documentation as reference –> http://www.crummy.com/software/BeautifulSoup/documentation.html

Goodluck!