Mercurial > hg > anonet-resdb
annotate contrib/splice3/LINUX/manual @ 671:1bc0c37ce2c1 draft
updated splice3 manual for character controls
| author | d3v11 <d3v11@d3v11.ano> |
|---|---|
| date | Sat, 15 Oct 2011 14:07:54 -0500 |
| parents | eee9ab3d1b11 |
| children |
| rev | line source |
|---|---|
| 626 | 1 .TH splice3 "1" "sep 2011" "splice3" "Brute Force Utilities" |
| 2 .SH | |
| 3 NAME | |
| 4 splice3 - manual page for splice3 | |
| 5 | |
| 6 .SH | |
| 7 DESCRIPTION | |
| 8 | |
| 9 Brute Force Utilities For The Linux Shell. | |
| 10 | |
| 11 .SH | |
| 12 OPTIONS | |
| 13 -h, --help show the help message and exit | |
| 14 | |
| 15 -c, Parse passwords to this command | |
| 16 .br | |
| 17 Command must contain regexp PASSWORD. | |
| 18 .br | |
| 19 splice3 -c"command PASSWORD" | |
| 20 | |
| 21 -d Path to custom dictionary(wordlist) | |
| 22 .br | |
| 23 splice3 -d"/home/user/wordlist" | |
| 24 .br | |
| 25 If this option is unset then splice3 | |
| 26 .br | |
| 27 will use its default dictionary. | |
| 28 | |
| 29 --rtfm Show manual page and exit | |
| 30 | |
| 31 -r Path to restore file | |
| 32 .br | |
| 33 splice3 -r"/home/user/splice3.save" | |
| 34 .br | |
| 35 DO NOT USE MODIFIED OR NON-SPLICE | |
| 36 .br | |
| 37 SAVE FILES. | |
| 38 | |
| 39 -s Directory path to create save file | |
| 40 .br | |
| 41 splice3 -s"/home/user" | |
| 42 | |
| 43 -t Test output of -c's command | |
| 44 .br | |
| 45 splice3 -t"All OK" | |
| 46 | |
| 47 --time Manipulate timed iterations | |
| 48 .br | |
| 49 splice3 can pause its attack for | |
| 50 .br | |
| 51 a specified amount of seconds per | |
| 52 .br | |
| 53 every specified amount of iterations. | |
| 54 .br | |
| 55 splice3 --time="12, 360" | |
| 56 .br | |
| 57 The above will tell splice3 to pause | |
| 58 .br | |
| 59 360 seconds after trying every 12 passwords. | |
| 60 | |
| 61 -u Path to username list | |
| 62 .br | |
| 63 splice3 -u"/home/user/userlist" | |
| 64 .br | |
| 65 If you use this command the regexp | |
| 66 .br | |
| 67 `USERNAME' will be required in the | |
| 68 .br | |
| 69 given -c command. See -c flag for | |
| 70 .br | |
| 71 details. | |
| 72 | |
| 73 .br | |
| 74 --exh-l Use an exhaustive attack with letters only | |
| 75 | |
| 76 .br | |
| 77 --exh-n Use an exhaustive attack with numbers only | |
| 78 | |
| 79 .br | |
| 80 --exh-s Use an exhaustive attack with special characters only | |
| 81 | |
| 82 .br | |
| 83 --exh-ln Use an exhaustive attack with letters and numbers only | |
| 84 | |
| 85 .br | |
| 86 --exh-ls Use an exhaustive attack with letters and special | |
| 87 .br | |
| 88 characters only | |
| 89 | |
| 90 .br | |
| 91 --exh-ns Use an exhaustive attack with numbers and special | |
| 92 .br | |
| 93 characters only | |
| 94 | |
| 95 --exh-lns Use an exhaustive attack with all characters | |
| 96 | |
| 97 --exh-custom Use an exhaustive attack with custom characters | |
| 98 .br | |
| 99 splice3 --exh-custom='character list' | |
| 100 | |
| 101 --stdout Print only passwords to stdout | |
| 102 | |
| 103 -A Use alphabetical mixing module | |
| 104 | |
| 105 -B Use backwards module | |
| 106 | |
| 107 -C Use alternating caps module | |
| 108 | |
| 109 -L Use "L337" speak module | |
| 110 | |
| 111 -M Use MD5 module | |
| 112 | |
| 113 -N Use numerical mixing module | |
| 114 | |
| 115 -R Use regular words module | |
| 116 | |
| 117 -S Use special mixing module | |
| 118 | |
| 119 -U Use custom mixing module | |
| 120 .br | |
| 121 splice3 -U"/home/user/list" | |
| 122 | |
| 123 --wep-5 Use 5 char WEP module | |
| 124 .br | |
| 125 splice3 will strip 5 char words | |
| 126 .br | |
| 127 from the dictionary and convert | |
| 128 .br | |
| 129 them to WEP compatible passwords. | |
| 130 | |
| 131 --wep-13 Use 13 char WEP module | |
| 132 .br | |
| 133 splice3 will strip 13 char words | |
| 134 .br | |
| 135 from the dictionary and convert | |
| 136 .br | |
| 137 them to WEP compatible passwords. | |
| 138 | |
| 139 --letters Use letter characters | |
| 140 | |
| 141 --numbers Use number characters | |
| 142 | |
| 143 --specials Use special characters | |
| 144 | |
| 145 --no-char Override character usage | |
| 146 | |
|
670
eee9ab3d1b11
improved splice3 code with --char-length
d3v11 <d3v11@d3v11.ano>
parents:
669
diff
changeset
|
147 --char-length Start and end with set character lengths |
|
eee9ab3d1b11
improved splice3 code with --char-length
d3v11 <d3v11@d3v11.ano>
parents:
669
diff
changeset
|
148 .br |
|
eee9ab3d1b11
improved splice3 code with --char-length
d3v11 <d3v11@d3v11.ano>
parents:
669
diff
changeset
|
149 splice3 appends characters to the beginning |
|
eee9ab3d1b11
improved splice3 code with --char-length
d3v11 <d3v11@d3v11.ano>
parents:
669
diff
changeset
|
150 .br |
|
eee9ab3d1b11
improved splice3 code with --char-length
d3v11 <d3v11@d3v11.ano>
parents:
669
diff
changeset
|
151 and end of each password. You can choose |
|
eee9ab3d1b11
improved splice3 code with --char-length
d3v11 <d3v11@d3v11.ano>
parents:
669
diff
changeset
|
152 .br |
|
eee9ab3d1b11
improved splice3 code with --char-length
d3v11 <d3v11@d3v11.ano>
parents:
669
diff
changeset
|
153 where these characters start and stop. IE: |
|
eee9ab3d1b11
improved splice3 code with --char-length
d3v11 <d3v11@d3v11.ano>
parents:
669
diff
changeset
|
154 .br |
|
eee9ab3d1b11
improved splice3 code with --char-length
d3v11 <d3v11@d3v11.ano>
parents:
669
diff
changeset
|
155 splice3 --char-length="1, 5" |
|
eee9ab3d1b11
improved splice3 code with --char-length
d3v11 <d3v11@d3v11.ano>
parents:
669
diff
changeset
|
156 .br |
|
eee9ab3d1b11
improved splice3 code with --char-length
d3v11 <d3v11@d3v11.ano>
parents:
669
diff
changeset
|
157 splice3 --char-length="1, 3" --exh-lns |
|
eee9ab3d1b11
improved splice3 code with --char-length
d3v11 <d3v11@d3v11.ano>
parents:
669
diff
changeset
|
158 |
| 626 | 159 --custom Use custom characters |
| 160 .br | |
| 161 splice3 --custom="/home/user/list" | |
| 162 | |
| 163 --deshadow Crack shadow hash sums | |
| 164 | |
| 165 --getshadow Get the shadow info for a user | |
| 166 .br | |
| 167 splice3 --getshadow="username" | |
| 168 .br | |
| 169 See deshadow below for details. | |
| 170 | |
| 171 --setshadow Use the shadow info from a file | |
| 172 .br | |
| 173 splice3 --setshadow="/home/user/shadow" | |
| 174 .br | |
| 175 See deshadow below for details. | |
| 176 | |
| 658 | 177 --se-create a social engineering module. |
| 626 | 178 .br |
| 179 splice3 will create concatenated words from | |
| 180 .br | |
| 658 | 181 dictionary. |
| 626 | 182 |
| 183 --create Create a dictionary and exit. splice3 | |
| 184 .br | |
| 185 will create a dictionary with a user | |
| 186 .br | |
| 187 selected wordlist and the selected | |
| 188 .br | |
| 189 Modules. The new dictionary will be | |
| 190 .br | |
| 191 created in your current directory as | |
| 192 .br | |
| 193 splice3.create | |
| 194 | |
| 195 -v, --version Show splice3's version number and exit | |
| 196 | |
| 197 --debug Enable debugging | |
| 198 .br | |
| 199 Allows debugging and traceback reporting from splice3. | |
| 200 | |
| 201 .SH | |
| 202 DICTIONARIES | |
| 203 | |
| 204 splice3 comes equipped with its own dictionary but is | |
| 205 .br | |
| 206 designed to use custom dictionaries as well. The | |
| 207 .br | |
| 208 dictionary should be in the following format: a plain | |
| 209 .br | |
| 210 text file with one word per line, no spaces between | |
| 211 .br | |
| 212 words, letters only. You do not have to follow the | |
| 213 .br | |
| 214 above guideline exactly but it is strongly suggested. | |
| 215 .br | |
| 216 IE: | |
| 217 | |
| 218 ============= NOT ACTUAL LINE ON FILE =============== | |
| 219 .br | |
| 220 qwerty | |
| 221 .br | |
| 222 john | |
| 223 .br | |
| 224 linux | |
| 225 .br | |
| 226 newpass | |
| 227 .br | |
| 228 princess | |
| 229 .br | |
| 230 hacker | |
| 231 .br | |
| 232 ============= NOT ACTUAL LINE ON FILE =============== | |
| 233 | |
| 234 .SH | |
| 235 USERNAMES | |
| 236 | |
| 237 splice3 is capable of cycling through usernames as it | |
| 238 .br | |
| 239 would a dictionary. There is no default username list | |
| 240 .br | |
| 241 on splice3. The username list should be in the | |
| 242 .br | |
| 243 following format: a plain text file with one word per | |
| 244 .br | |
| 245 line, no spaces between words, letters only. You do | |
| 246 .br | |
| 247 not have to follow the above guideline exactly but it | |
| 248 .br | |
| 249 is strongly suggested. | |
| 250 .br | |
| 251 IE: | |
| 252 | |
| 253 ============= NOT ACTUAL LINE ON FILE =============== | |
| 254 .br | |
| 255 john | |
| 256 .br | |
| 257 admin | |
| 258 .br | |
| 259 root | |
| 260 .br | |
| 261 david | |
| 262 .br | |
| 263 fred | |
| 264 .br | |
| 265 ============= NOT ACTUAL LINE ON FILE =============== | |
| 266 | |
| 267 .SH | |
| 268 SAVING AND RESTORING | |
| 269 | |
| 270 splice3 is capable of restarting where it was stopped | |
| 271 .br | |
| 272 by using the -r switch followed by the full path to | |
| 273 .br | |
| 274 a splice3.save file. DO NOT modify these files or | |
| 275 .br | |
| 276 splice3 may receive an error or not load at all. | |
| 277 .br | |
| 278 When restoring, if you set the -t switch you must | |
| 279 .br | |
| 280 manually set it again or splice3 will not test for | |
| 281 .br | |
| 282 specified output. If saving splice3's status, then | |
| 283 .br | |
| 284 splice3 will save to the specified directory as | |
| 285 .br | |
| 286 splice3.save. If splice3.save already exists it will | |
| 287 .br | |
| 288 be overwritten so change the name of any original | |
| 289 .br | |
| 290 copies if you want to keep them. If saving a splice3 | |
| 291 .br | |
| 292 session you should stop the process using the | |
| 293 .br | |
| 294 appropriate terminal feature before killing splice3 | |
| 295 .br | |
| 296 to avoid corrupting the save file. | |
| 297 | |
| 298 -s "/path/to/save/directory/" | |
| 299 | |
| 300 -r "/path/to/splice3.save/" | |
| 301 .SH | |
| 302 MODULES | |
| 303 | |
| 660 | 304 -A -B -C -L -M -N -R -S -U --wep-5 --wep-13 --se-create |
| 626 | 305 .br |
| 306 splice3 comes equipped with several modules that mangle | |
| 307 .br | |
| 308 the words in the selected dictionary to create probable | |
| 309 .br | |
| 310 password combinations. You may use as many of these | |
| 311 .br | |
| 312 modules as you want. Some modules can take a few or more | |
| 313 .br | |
| 314 minutes to enhance a dictionary depending on the size | |
| 315 .br | |
| 316 of the selected dictionary. | |
| 317 | |
| 318 -A Alphabetical Mixing Module: | |
| 319 .br | |
| 320 This module puts several combinations of alphabet | |
| 321 .br | |
| 322 characters inside the words in the selected | |
| 323 .br | |
| 324 dictionary. IE: | |
| 325 | |
| 326 pZassword | |
| 327 .br | |
| 328 pCatssword | |
| 329 .br | |
| 330 passworKd | |
| 331 .br | |
| 332 passwoJrLd | |
| 333 .br | |
| 334 ... | |
| 335 | |
| 336 -B Backwards Module: | |
| 337 .br | |
| 338 This module creates backwards words from the | |
| 339 .br | |
| 340 selected dictionary. IE: | |
| 341 | |
| 342 drowssap | |
| 343 .br | |
| 344 ... | |
| 345 | |
| 346 -C Capitalization Module: | |
| 347 .br | |
| 348 This module recreates the words in the selected | |
| 349 .br | |
| 350 dictionary with alternating capitalizations. | |
| 351 .br | |
| 352 IE: | |
| 353 | |
| 354 Password | |
| 355 .br | |
| 356 PAssword | |
| 357 .br | |
| 358 PaSsWoRd | |
| 359 .br | |
| 360 pAsSwOrD | |
| 361 .br | |
| 362 passwoRD | |
| 363 .br | |
| 364 ... | |
| 365 | |
| 366 -L L337 Speak Module: | |
| 367 .br | |
| 368 This module converts the words in the selected | |
| 369 .br | |
| 370 dictionary to several versions of "l337 speak". | |
| 371 .br | |
| 372 IE: | |
| 373 | |
| 374 p4ssword | |
| 375 .br | |
| 376 p455w0rd | |
| 377 .br | |
| 378 pa5sword | |
| 379 .br | |
| 380 ps@$$word | |
| 381 .br | |
| 382 ... | |
| 383 | |
| 384 -N Numerical Mixing Module: | |
| 385 .br | |
| 386 This module puts several combinations of number | |
| 387 .br | |
| 388 characters inside the words in the selected | |
| 389 .br | |
| 390 dictionary. IE: | |
| 391 | |
| 392 p2assword | |
| 393 .br | |
| 394 p5a8ssword | |
| 395 .br | |
| 396 passwor0d | |
| 397 .br | |
| 398 passwo6r9d | |
| 399 .br | |
| 400 ... | |
| 401 | |
| 402 -R Regular Words Module: | |
| 403 .br | |
| 404 This module tells splice3 to use the words in a | |
| 405 .br | |
| 406 selected dictionary as they are listed. | |
| 407 | |
| 408 | |
| 409 -S Special Mixing Module: | |
| 410 .br | |
| 411 This module puts several combinations of special | |
| 412 .br | |
| 413 characters inside the words in the selected | |
| 414 .br | |
| 415 dictionary. IE: | |
| 416 | |
| 417 p!assword | |
| 418 .br | |
| 419 p@a$ssword | |
| 420 .br | |
| 421 passwor(d | |
| 422 .br | |
| 423 passwo-r+d | |
| 424 .br | |
| 425 ... | |
| 426 | |
| 427 -U Custom Mixing Module: | |
| 428 .br | |
| 429 This module puts several combinations of user | |
| 430 .br | |
| 431 selected characters inside the words from the | |
| 432 .br | |
| 433 selected character list. IE: | |
| 434 | |
| 435 p!assword | |
| 436 .br | |
| 437 p@a$ssword | |
| 438 .br | |
| 439 passwor(d | |
| 440 .br | |
| 441 passwo-r+d | |
| 442 .br | |
| 443 ... | |
| 444 | |
| 445 -U's list should only contain one character per | |
| 446 .br | |
| 447 line on a plain text file. If you select this | |
| 448 .br | |
| 449 module then modules -A, -N, -S will be ignored. | |
| 450 .br | |
| 451 IE: | |
| 452 | |
| 453 ============= NOT ACTUAL LINE ON FILE =============== | |
| 454 .br | |
| 455 j | |
| 456 .br | |
| 457 1 | |
| 458 .br | |
| 459 @ | |
| 460 .br | |
| 461 0 | |
| 462 .br | |
| 463 z | |
| 464 .br | |
| 465 ============= NOT ACTUAL LINE ON FILE =============== | |
| 466 | |
| 467 If -A, -N, and/or -S options are selected then | |
| 468 .br | |
| 469 the modules will be combined. IE: | |
| 470 | |
| 471 pZa!ssword | |
| 472 .br | |
| 473 p0atssword | |
| 474 .br | |
| 475 passwor7d | |
| 476 .br | |
| 477 passwo*rLd | |
| 478 .br | |
| 479 ... | |
| 480 | |
| 481 -M MD5 Module: | |
| 482 .br | |
| 483 This module generates md5 hash sums for | |
| 484 .br | |
| 485 words listed in the selected dictionary. | |
| 486 .br | |
| 487 IE: | |
| 488 | |
| 489 5912d7bfd10f631f1715bf85bbb72d97 | |
| 490 .br | |
| 491 966e8fda594333563c02fa4b69765a5e | |
| 492 .br | |
| 493 900bc885d7553375aec470198a9514f3 | |
| 494 .br | |
| 495 97f014516561ef487ec368d6158eb3f4 | |
| 496 .br | |
| 497 ... | |
| 498 | |
| 499 | |
| 500 --wep-* WEP Modules: | |
| 501 .br | |
| 502 these two modules strip 5 or 13 character | |
| 503 .br | |
| 504 words from the selected dictionary and produce | |
| 505 .br | |
| 662 | 506 WEP compatible hex passwords. If your dictionary |
| 507 .br | |
| 508 does not contain 5 or 13 character words then | |
| 509 .br | |
| 510 splice3 will likely give an error. | |
| 511 | |
| 512 | |
| 513 --se-create Social Engineering Module: | |
| 514 .br | |
| 515 see the social engineering section below for | |
| 516 .br | |
| 517 details. | |
| 626 | 518 |
| 519 .SH | |
| 520 CHARACTERS | |
| 521 | |
| 522 splice3 appends alternating character tags to the beginning | |
| 523 .br | |
| 524 and/or ending of each password. By default splice3 will use | |
| 525 .br | |
| 526 all standard keyboard characters but you can choose to use | |
| 527 .br | |
| 528 specific combinations. If one or more of the following | |
| 529 .br | |
| 530 options is omitted then only the selected options will be | |
| 531 .br | |
| 532 used ; they will be combined. | |
| 533 | |
| 534 --letters Use letter characters | |
| 535 .br | |
| 536 Apassword | |
| 537 .br | |
| 538 passwordA | |
| 539 .br | |
| 540 abCpassword | |
| 541 .br | |
| 542 passwordxYz | |
| 543 .br | |
| 544 ... | |
| 545 | |
| 546 --numbers Use numbers characters | |
| 547 .br | |
| 548 1password | |
| 549 .br | |
| 550 password1 | |
| 551 .br | |
| 552 123password | |
| 553 .br | |
| 554 password098 | |
| 555 .br | |
| 556 ... | |
| 557 | |
| 558 --specials Use specials characters | |
| 559 .br | |
| 560 $password | |
| 561 .br | |
| 562 password^ | |
| 563 .br | |
| 564 %)!password | |
| 565 .br | |
| 566 password#*@ | |
| 567 .br | |
| 568 ... | |
| 569 | |
| 570 --custom Use custom characters from a list | |
| 571 .br | |
| 572 $password | |
| 573 .br | |
| 574 password^ | |
| 575 .br | |
| 576 %)!password | |
| 577 .br | |
| 578 password#*@ | |
| 579 .br | |
| 580 ... | |
| 581 | |
| 582 --custom list should only contain one character per | |
| 583 .br | |
| 584 line on a plain text file. If you select this | |
| 585 .br | |
| 586 module then other character flags will be ignored. | |
| 587 .br | |
| 588 If the custom list matches the selected dictionary | |
| 589 .br | |
| 590 then splice3 will run in exhaustive mode. | |
| 591 .br | |
| 592 IE: | |
| 593 | |
| 594 ============= NOT ACTUAL LINE ON FILE =============== | |
| 595 .br | |
| 596 j | |
| 597 .br | |
| 598 1 | |
| 599 .br | |
| 600 @ | |
| 601 .br | |
| 602 0 | |
| 603 .br | |
| 604 z | |
| 605 .br | |
| 606 ============= NOT ACTUAL LINE ON FILE =============== | |
| 607 | |
| 608 --letters, --numbers, and/or --specials | |
| 609 .br | |
| 610 Apassword6& | |
| 611 .br | |
| 612 7passwordA | |
| 613 .br | |
| 614 a*Cpassword9 | |
| 615 .br | |
| 616 a}password0Yz | |
| 617 .br | |
| 618 ... | |
| 619 | |
|
671
1bc0c37ce2c1
updated splice3 manual for character controls
d3v11 <d3v11@d3v11.ano>
parents:
670
diff
changeset
|
620 --no-char Override character usage |
|
1bc0c37ce2c1
updated splice3 manual for character controls
d3v11 <d3v11@d3v11.ano>
parents:
670
diff
changeset
|
621 .br |
|
1bc0c37ce2c1
updated splice3 manual for character controls
d3v11 <d3v11@d3v11.ano>
parents:
670
diff
changeset
|
622 This option tells splice3 not to make |
|
1bc0c37ce2c1
updated splice3 manual for character controls
d3v11 <d3v11@d3v11.ano>
parents:
670
diff
changeset
|
623 .br |
|
1bc0c37ce2c1
updated splice3 manual for character controls
d3v11 <d3v11@d3v11.ano>
parents:
670
diff
changeset
|
624 any character additions to passwords. |
|
1bc0c37ce2c1
updated splice3 manual for character controls
d3v11 <d3v11@d3v11.ano>
parents:
670
diff
changeset
|
625 |
|
1bc0c37ce2c1
updated splice3 manual for character controls
d3v11 <d3v11@d3v11.ano>
parents:
670
diff
changeset
|
626 --char-length Start and end with set character lengths |
|
1bc0c37ce2c1
updated splice3 manual for character controls
d3v11 <d3v11@d3v11.ano>
parents:
670
diff
changeset
|
627 .br |
|
1bc0c37ce2c1
updated splice3 manual for character controls
d3v11 <d3v11@d3v11.ano>
parents:
670
diff
changeset
|
628 This option tells splice3 to start and stop with a set |
|
1bc0c37ce2c1
updated splice3 manual for character controls
d3v11 <d3v11@d3v11.ano>
parents:
670
diff
changeset
|
629 .br |
|
1bc0c37ce2c1
updated splice3 manual for character controls
d3v11 <d3v11@d3v11.ano>
parents:
670
diff
changeset
|
630 amount of characters. IE: |
|
1bc0c37ce2c1
updated splice3 manual for character controls
d3v11 <d3v11@d3v11.ano>
parents:
670
diff
changeset
|
631 |
|
1bc0c37ce2c1
updated splice3 manual for character controls
d3v11 <d3v11@d3v11.ano>
parents:
670
diff
changeset
|
632 The following will start with one character added and |
|
1bc0c37ce2c1
updated splice3 manual for character controls
d3v11 <d3v11@d3v11.ano>
parents:
670
diff
changeset
|
633 .br |
|
1bc0c37ce2c1
updated splice3 manual for character controls
d3v11 <d3v11@d3v11.ano>
parents:
670
diff
changeset
|
634 end with 3: |
|
1bc0c37ce2c1
updated splice3 manual for character controls
d3v11 <d3v11@d3v11.ano>
parents:
670
diff
changeset
|
635 .br |
|
1bc0c37ce2c1
updated splice3 manual for character controls
d3v11 <d3v11@d3v11.ano>
parents:
670
diff
changeset
|
636 splice3 --char-length='1, 3' |
|
1bc0c37ce2c1
updated splice3 manual for character controls
d3v11 <d3v11@d3v11.ano>
parents:
670
diff
changeset
|
637 |
|
1bc0c37ce2c1
updated splice3 manual for character controls
d3v11 <d3v11@d3v11.ano>
parents:
670
diff
changeset
|
638 The following will generate only 6 character passwords: |
|
1bc0c37ce2c1
updated splice3 manual for character controls
d3v11 <d3v11@d3v11.ano>
parents:
670
diff
changeset
|
639 .br |
|
1bc0c37ce2c1
updated splice3 manual for character controls
d3v11 <d3v11@d3v11.ano>
parents:
670
diff
changeset
|
640 splice3 --exh-custom='MyCharacters.txt' --char-length='6, 6' |
|
1bc0c37ce2c1
updated splice3 manual for character controls
d3v11 <d3v11@d3v11.ano>
parents:
670
diff
changeset
|
641 |
| 626 | 642 .SH |
| 662 | 643 SOCIAL ENGINEERING |
| 644 | |
| 645 --se-create Social Engineering Module: | |
| 646 .br | |
| 647 splice3 is equipped with a social engineering module to create | |
| 648 .br | |
| 649 concatenated words from the selected dictionary. This module | |
| 650 .br | |
| 651 allows for "Module Stacking". IE, if you select other other | |
| 652 .br | |
| 653 modules when setting this flag then compiled words will also | |
| 654 .br | |
| 655 be incorporated into the algorithm as if they appeared on the | |
| 656 .br | |
| 657 the selected dictionary itself. | |
| 658 | |
| 659 .SH | |
| 626 | 660 DESHADOW |
| 661 | |
| 662 splice3 comes with its own small program to compare a created hash | |
| 663 .br | |
| 664 sum, those found in /etc/shadow with an existing one given through | |
| 665 .br | |
| 666 user input. When using the deshadow option you will need to set | |
| 667 .br | |
| 668 exactly one of the --getshadow or --setshadow options. There is no | |
| 669 .br | |
| 670 need to use the -c CMD or the -t TEST flags when using this option | |
| 671 .br | |
| 672 because the values for each will be preset. | |
| 673 | |
| 674 --getshadow Get the shadow info for a user | |
| 675 .br | |
| 676 see examples below for usage details. | |
| 677 | |
| 678 --setshadow Use the shadow info from a file. This file should be | |
| 679 .br | |
| 680 in plain text and contain only one line with the | |
| 681 .br | |
| 682 following syntax: | |
| 683 | |
| 684 ============= NOT ACTUAL LINE ON FILE =============== | |
| 685 .br | |
| 686 $HashingMethod$SaltValue$ActualHashItself | |
| 687 | |
| 688 ============= NOT ACTUAL LINE ON FILE =============== | |
| 689 | |
| 690 If you need to see an example Shadow entry you may | |
| 691 .br | |
| 692 use the following command: | |
| 693 | |
| 694 cat /etc/shadow | grep -i "$USER" | |
| 695 | |
| 696 .SH | |
| 697 EXHAUSTIVE | |
| 698 | |
| 699 splice3 is capable of mounting a standard exhaustive attack. | |
| 700 .br | |
| 701 An exhaustive attack is a sure\-fire method to crack any | |
| 702 .br | |
| 703 password but this can also take large amounts of time | |
| 704 .br | |
| 705 depending on the length of a password. If it's necessary to | |
| 706 .br | |
| 707 use an exhaustive bruteforcing algorithm you may do so with | |
| 708 .br | |
| 709 one of the following options: | |
| 710 | |
| 711 --exh-l | |
| 712 .br | |
| 713 This attack uses only letters. | |
| 714 | |
| 715 --exh-n | |
| 716 .br | |
| 717 This attack uses only numbers. | |
| 718 | |
| 719 --exh-s | |
| 720 .br | |
| 721 This attack uses only special characters. | |
| 722 | |
| 723 --exh-ln | |
| 724 .br | |
| 725 This attack uses only letters and numbers. | |
| 726 | |
| 727 --exh-ls | |
| 728 .br | |
| 729 This attack uses only letters and special characters. | |
| 730 | |
| 731 --exh-ns | |
| 732 .br | |
| 733 This attack uses only numbers and special characters. | |
| 734 | |
| 735 --exh-lns | |
| 736 .br | |
| 737 This attack uses all characters. | |
| 738 | |
|
669
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
739 --exh-custom |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
740 .br |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
741 This attack uses custom characters in a character list. IE: |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
742 .br |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
743 --exh-custom='CharList.txt' |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
744 .br |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
745 A character list should be in the following syntax: |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
746 |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
747 ============= NOT ACTUAL LINE ON FILE =============== |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
748 .br |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
749 j |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
750 .br |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
751 1 |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
752 .br |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
753 @ |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
754 .br |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
755 0 |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
756 .br |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
757 z |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
758 .br |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
759 ============= NOT ACTUAL LINE ON FILE =============== |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
760 |
| 626 | 761 .SH |
| 762 STDOUT | |
| 763 | |
| 764 splice3 has the option to skip the command and test flags | |
| 765 .br | |
| 766 and print only the created passwords to stdout. This is a | |
| 767 .br | |
| 768 useful flag if you're going to pipe the output to stdin | |
| 769 .br | |
| 770 on another program. | |
| 771 | |
| 772 --stdout | |
| 773 .br | |
| 774 The output will look similar to the following: | |
| 775 .br | |
| 776 password | |
| 777 .br | |
| 778 qwerty | |
| 779 .br | |
| 780 123magick | |
| 781 .br | |
| 782 newpass | |
| 783 .br | |
| 784 john1965 | |
| 785 | |
| 786 .SH | |
| 787 REGEXP | |
| 788 | |
| 789 splice3 can create some regexp type functions | |
| 790 .br | |
| 791 using existing options: | |
| 792 | |
| 793 splice3 --command='echo onePASSWORDthree' --test='onetwothree' --exh-l | |
| 794 | |
| 795 splice3 -c 'echo johnPASSWORD65' --test='john1965' --exh-custom='MyList.txt' | |
| 796 | |
| 797 splice3 --command='echo ilovePASSWORD' -R --no-char --test='iloveqwerty' | |
| 798 | |
| 799 you may also want to see --se-create for more specific attacks. | |
| 800 | |
| 801 .SH | |
| 802 CONTROLS | |
| 803 | |
| 804 splice3 contains some options worth going over again. | |
| 805 | |
| 806 --command='<insert command> PASSWORD' #must contain regexp 'PASSWORD' | |
| 807 | |
| 808 --time='10, 1' #timed iterations | |
| 809 | |
| 810 --custom='file.txt', -U 'file.txt', --dictionary='file.txt', | |
| 811 .br | |
| 812 --exh-custom='file.txt' #custom wordlists and/or character lists | |
| 813 | |
| 814 --no-char #useful flag to only use the generated wordlist | |
| 815 .br | |
| 816 #no characters will be appended to the passwords | |
| 817 | |
| 818 --stdout #prints only passwords | |
| 819 | |
| 820 --debug #helps to troubleshoot | |
| 821 | |
| 822 .SH | |
| 823 EXAMPLES | |
| 824 | |
| 825 splice3 -c"unrar -pPASSWORD t file.rar" -t"All OK" -ACLNRS | |
| 826 | |
| 827 splice3 -c"sshpass -pPASSWORD ssh user@host" -d"wordlist" -L | |
| 828 | |
| 829 splice3 -c"smbclient -L 192.168.1.0 -Uusername%PASSWORD" -L | |
| 830 | |
| 831 splice3 --deshadow --getshadow="root" -ACLNRS | |
| 832 | |
| 833 splice3 --deshadow --setshadow="/home/user/shadow.txt" -ACLNRS | |
| 834 | |
| 835 splice3\\ | |
| 836 .br | |
| 837 --command='echo PASSWORD | aircrack-ng -b 00:11:22:33:44:55 -w - *.cap'\\ | |
| 838 .br | |
| 839 --wep-5 --wep-13 --no-char --dictionary='MyWords.txt'\\ | |
| 840 .br | |
| 841 --test='KEY FOUND' | |
| 842 | |
| 843 splice3 -c"curl --user <user[:PASSWORD]> https://www.example.com" -R | |
| 844 | |
| 845 .SH | |
| 846 LICENSE | |
| 847 | |
| 848 This program is free software: you can redistribute it and/or modify | |
| 849 .br | |
| 850 it under the terms of the GNU General Public License as published by | |
| 851 .br | |
| 852 the Free Software Foundation, either version 3 of the License, or | |
| 853 .br | |
| 854 (at your option) any later version. | |
| 855 | |
| 856 This program is distributed in the hope that it will be useful, | |
| 857 .br | |
| 858 but WITHOUT ANY WARRANTY; without even the implied warranty of | |
| 859 .br | |
| 860 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | |
| 861 .br | |
| 862 GNU General Public License for more details. | |
| 863 | |
| 864 You should have received a copy of the GNU General Public License | |
| 865 .br | |
| 866 along with this program. If not, see <http://www.gnu.org/licenses/>. |