Mercurial > hg > anonet-resdb
annotate contrib/splice3/LINUX/manual @ 669:271fb597efc9 draft
improved splice3's code. see contrib/splice3/CHANGES
| author | d3v11 <d3v11@d3v11.ano> |
|---|---|
| date | Fri, 14 Oct 2011 18:19:47 -0500 |
| parents | 57f1b4308edd |
| children | eee9ab3d1b11 |
| rev | line source |
|---|---|
| 626 | 1 .TH splice3 "1" "sep 2011" "splice3" "Brute Force Utilities" |
| 2 .SH | |
| 3 NAME | |
| 4 splice3 - manual page for splice3 | |
| 5 | |
| 6 .SH | |
| 7 DESCRIPTION | |
| 8 | |
| 9 Brute Force Utilities For The Linux Shell. | |
| 10 | |
| 11 .SH | |
| 12 OPTIONS | |
| 13 -h, --help show the help message and exit | |
| 14 | |
| 15 -c, Parse passwords to this command | |
| 16 .br | |
| 17 Command must contain regexp PASSWORD. | |
| 18 .br | |
| 19 splice3 -c"command PASSWORD" | |
| 20 | |
| 21 -d Path to custom dictionary(wordlist) | |
| 22 .br | |
| 23 splice3 -d"/home/user/wordlist" | |
| 24 .br | |
| 25 If this option is unset then splice3 | |
| 26 .br | |
| 27 will use its default dictionary. | |
| 28 | |
| 29 --rtfm Show manual page and exit | |
| 30 | |
| 31 -r Path to restore file | |
| 32 .br | |
| 33 splice3 -r"/home/user/splice3.save" | |
| 34 .br | |
| 35 DO NOT USE MODIFIED OR NON-SPLICE | |
| 36 .br | |
| 37 SAVE FILES. | |
| 38 | |
| 39 -s Directory path to create save file | |
| 40 .br | |
| 41 splice3 -s"/home/user" | |
| 42 | |
| 43 -t Test output of -c's command | |
| 44 .br | |
| 45 splice3 -t"All OK" | |
| 46 | |
| 47 --time Manipulate timed iterations | |
| 48 .br | |
| 49 splice3 can pause its attack for | |
| 50 .br | |
| 51 a specified amount of seconds per | |
| 52 .br | |
| 53 every specified amount of iterations. | |
| 54 .br | |
| 55 splice3 --time="12, 360" | |
| 56 .br | |
| 57 The above will tell splice3 to pause | |
| 58 .br | |
| 59 360 seconds after trying every 12 passwords. | |
| 60 | |
| 61 -u Path to username list | |
| 62 .br | |
| 63 splice3 -u"/home/user/userlist" | |
| 64 .br | |
| 65 If you use this command the regexp | |
| 66 .br | |
| 67 `USERNAME' will be required in the | |
| 68 .br | |
| 69 given -c command. See -c flag for | |
| 70 .br | |
| 71 details. | |
| 72 | |
| 73 .br | |
| 74 --exh-l Use an exhaustive attack with letters only | |
| 75 | |
| 76 .br | |
| 77 --exh-n Use an exhaustive attack with numbers only | |
| 78 | |
| 79 .br | |
| 80 --exh-s Use an exhaustive attack with special characters only | |
| 81 | |
| 82 .br | |
| 83 --exh-ln Use an exhaustive attack with letters and numbers only | |
| 84 | |
| 85 .br | |
| 86 --exh-ls Use an exhaustive attack with letters and special | |
| 87 .br | |
| 88 characters only | |
| 89 | |
| 90 .br | |
| 91 --exh-ns Use an exhaustive attack with numbers and special | |
| 92 .br | |
| 93 characters only | |
| 94 | |
| 95 --exh-lns Use an exhaustive attack with all characters | |
| 96 | |
| 97 --exh-custom Use an exhaustive attack with custom characters | |
| 98 .br | |
| 99 splice3 --exh-custom='character list' | |
| 100 | |
| 101 --stdout Print only passwords to stdout | |
| 102 | |
| 103 -A Use alphabetical mixing module | |
| 104 | |
| 105 -B Use backwards module | |
| 106 | |
| 107 -C Use alternating caps module | |
| 108 | |
| 109 -L Use "L337" speak module | |
| 110 | |
| 111 -M Use MD5 module | |
| 112 | |
| 113 -N Use numerical mixing module | |
| 114 | |
| 115 -R Use regular words module | |
| 116 | |
| 117 -S Use special mixing module | |
| 118 | |
| 119 -U Use custom mixing module | |
| 120 .br | |
| 121 splice3 -U"/home/user/list" | |
| 122 | |
| 123 --wep-5 Use 5 char WEP module | |
| 124 .br | |
| 125 splice3 will strip 5 char words | |
| 126 .br | |
| 127 from the dictionary and convert | |
| 128 .br | |
| 129 them to WEP compatible passwords. | |
| 130 | |
| 131 --wep-13 Use 13 char WEP module | |
| 132 .br | |
| 133 splice3 will strip 13 char words | |
| 134 .br | |
| 135 from the dictionary and convert | |
| 136 .br | |
| 137 them to WEP compatible passwords. | |
| 138 | |
| 139 --letters Use letter characters | |
| 140 | |
| 141 --numbers Use number characters | |
| 142 | |
| 143 --specials Use special characters | |
| 144 | |
| 145 --no-char Override character usage | |
| 146 | |
| 147 --custom Use custom characters | |
| 148 .br | |
| 149 splice3 --custom="/home/user/list" | |
| 150 | |
| 151 --deshadow Crack shadow hash sums | |
| 152 | |
| 153 --getshadow Get the shadow info for a user | |
| 154 .br | |
| 155 splice3 --getshadow="username" | |
| 156 .br | |
| 157 See deshadow below for details. | |
| 158 | |
| 159 --setshadow Use the shadow info from a file | |
| 160 .br | |
| 161 splice3 --setshadow="/home/user/shadow" | |
| 162 .br | |
| 163 See deshadow below for details. | |
| 164 | |
| 658 | 165 --se-create a social engineering module. |
| 626 | 166 .br |
| 167 splice3 will create concatenated words from | |
| 168 .br | |
| 658 | 169 dictionary. |
| 626 | 170 |
| 171 --create Create a dictionary and exit. splice3 | |
| 172 .br | |
| 173 will create a dictionary with a user | |
| 174 .br | |
| 175 selected wordlist and the selected | |
| 176 .br | |
| 177 Modules. The new dictionary will be | |
| 178 .br | |
| 179 created in your current directory as | |
| 180 .br | |
| 181 splice3.create | |
| 182 | |
| 183 -v, --version Show splice3's version number and exit | |
| 184 | |
| 185 --debug Enable debugging | |
| 186 .br | |
| 187 Allows debugging and traceback reporting from splice3. | |
| 188 | |
| 189 .SH | |
| 190 DICTIONARIES | |
| 191 | |
| 192 splice3 comes equipped with its own dictionary but is | |
| 193 .br | |
| 194 designed to use custom dictionaries as well. The | |
| 195 .br | |
| 196 dictionary should be in the following format: a plain | |
| 197 .br | |
| 198 text file with one word per line, no spaces between | |
| 199 .br | |
| 200 words, letters only. You do not have to follow the | |
| 201 .br | |
| 202 above guideline exactly but it is strongly suggested. | |
| 203 .br | |
| 204 IE: | |
| 205 | |
| 206 ============= NOT ACTUAL LINE ON FILE =============== | |
| 207 .br | |
| 208 qwerty | |
| 209 .br | |
| 210 john | |
| 211 .br | |
| 212 linux | |
| 213 .br | |
| 214 newpass | |
| 215 .br | |
| 216 princess | |
| 217 .br | |
| 218 hacker | |
| 219 .br | |
| 220 ============= NOT ACTUAL LINE ON FILE =============== | |
| 221 | |
| 222 .SH | |
| 223 USERNAMES | |
| 224 | |
| 225 splice3 is capable of cycling through usernames as it | |
| 226 .br | |
| 227 would a dictionary. There is no default username list | |
| 228 .br | |
| 229 on splice3. The username list should be in the | |
| 230 .br | |
| 231 following format: a plain text file with one word per | |
| 232 .br | |
| 233 line, no spaces between words, letters only. You do | |
| 234 .br | |
| 235 not have to follow the above guideline exactly but it | |
| 236 .br | |
| 237 is strongly suggested. | |
| 238 .br | |
| 239 IE: | |
| 240 | |
| 241 ============= NOT ACTUAL LINE ON FILE =============== | |
| 242 .br | |
| 243 john | |
| 244 .br | |
| 245 admin | |
| 246 .br | |
| 247 root | |
| 248 .br | |
| 249 david | |
| 250 .br | |
| 251 fred | |
| 252 .br | |
| 253 ============= NOT ACTUAL LINE ON FILE =============== | |
| 254 | |
| 255 .SH | |
| 256 SAVING AND RESTORING | |
| 257 | |
| 258 splice3 is capable of restarting where it was stopped | |
| 259 .br | |
| 260 by using the -r switch followed by the full path to | |
| 261 .br | |
| 262 a splice3.save file. DO NOT modify these files or | |
| 263 .br | |
| 264 splice3 may receive an error or not load at all. | |
| 265 .br | |
| 266 When restoring, if you set the -t switch you must | |
| 267 .br | |
| 268 manually set it again or splice3 will not test for | |
| 269 .br | |
| 270 specified output. If saving splice3's status, then | |
| 271 .br | |
| 272 splice3 will save to the specified directory as | |
| 273 .br | |
| 274 splice3.save. If splice3.save already exists it will | |
| 275 .br | |
| 276 be overwritten so change the name of any original | |
| 277 .br | |
| 278 copies if you want to keep them. If saving a splice3 | |
| 279 .br | |
| 280 session you should stop the process using the | |
| 281 .br | |
| 282 appropriate terminal feature before killing splice3 | |
| 283 .br | |
| 284 to avoid corrupting the save file. | |
| 285 | |
| 286 -s "/path/to/save/directory/" | |
| 287 | |
| 288 -r "/path/to/splice3.save/" | |
| 289 .SH | |
| 290 MODULES | |
| 291 | |
| 660 | 292 -A -B -C -L -M -N -R -S -U --wep-5 --wep-13 --se-create |
| 626 | 293 .br |
| 294 splice3 comes equipped with several modules that mangle | |
| 295 .br | |
| 296 the words in the selected dictionary to create probable | |
| 297 .br | |
| 298 password combinations. You may use as many of these | |
| 299 .br | |
| 300 modules as you want. Some modules can take a few or more | |
| 301 .br | |
| 302 minutes to enhance a dictionary depending on the size | |
| 303 .br | |
| 304 of the selected dictionary. | |
| 305 | |
| 306 -A Alphabetical Mixing Module: | |
| 307 .br | |
| 308 This module puts several combinations of alphabet | |
| 309 .br | |
| 310 characters inside the words in the selected | |
| 311 .br | |
| 312 dictionary. IE: | |
| 313 | |
| 314 pZassword | |
| 315 .br | |
| 316 pCatssword | |
| 317 .br | |
| 318 passworKd | |
| 319 .br | |
| 320 passwoJrLd | |
| 321 .br | |
| 322 ... | |
| 323 | |
| 324 -B Backwards Module: | |
| 325 .br | |
| 326 This module creates backwards words from the | |
| 327 .br | |
| 328 selected dictionary. IE: | |
| 329 | |
| 330 drowssap | |
| 331 .br | |
| 332 ... | |
| 333 | |
| 334 -C Capitalization Module: | |
| 335 .br | |
| 336 This module recreates the words in the selected | |
| 337 .br | |
| 338 dictionary with alternating capitalizations. | |
| 339 .br | |
| 340 IE: | |
| 341 | |
| 342 Password | |
| 343 .br | |
| 344 PAssword | |
| 345 .br | |
| 346 PaSsWoRd | |
| 347 .br | |
| 348 pAsSwOrD | |
| 349 .br | |
| 350 passwoRD | |
| 351 .br | |
| 352 ... | |
| 353 | |
| 354 -L L337 Speak Module: | |
| 355 .br | |
| 356 This module converts the words in the selected | |
| 357 .br | |
| 358 dictionary to several versions of "l337 speak". | |
| 359 .br | |
| 360 IE: | |
| 361 | |
| 362 p4ssword | |
| 363 .br | |
| 364 p455w0rd | |
| 365 .br | |
| 366 pa5sword | |
| 367 .br | |
| 368 ps@$$word | |
| 369 .br | |
| 370 ... | |
| 371 | |
| 372 -N Numerical Mixing Module: | |
| 373 .br | |
| 374 This module puts several combinations of number | |
| 375 .br | |
| 376 characters inside the words in the selected | |
| 377 .br | |
| 378 dictionary. IE: | |
| 379 | |
| 380 p2assword | |
| 381 .br | |
| 382 p5a8ssword | |
| 383 .br | |
| 384 passwor0d | |
| 385 .br | |
| 386 passwo6r9d | |
| 387 .br | |
| 388 ... | |
| 389 | |
| 390 -R Regular Words Module: | |
| 391 .br | |
| 392 This module tells splice3 to use the words in a | |
| 393 .br | |
| 394 selected dictionary as they are listed. | |
| 395 | |
| 396 | |
| 397 -S Special Mixing Module: | |
| 398 .br | |
| 399 This module puts several combinations of special | |
| 400 .br | |
| 401 characters inside the words in the selected | |
| 402 .br | |
| 403 dictionary. IE: | |
| 404 | |
| 405 p!assword | |
| 406 .br | |
| 407 p@a$ssword | |
| 408 .br | |
| 409 passwor(d | |
| 410 .br | |
| 411 passwo-r+d | |
| 412 .br | |
| 413 ... | |
| 414 | |
| 415 -U Custom Mixing Module: | |
| 416 .br | |
| 417 This module puts several combinations of user | |
| 418 .br | |
| 419 selected characters inside the words from the | |
| 420 .br | |
| 421 selected character list. IE: | |
| 422 | |
| 423 p!assword | |
| 424 .br | |
| 425 p@a$ssword | |
| 426 .br | |
| 427 passwor(d | |
| 428 .br | |
| 429 passwo-r+d | |
| 430 .br | |
| 431 ... | |
| 432 | |
| 433 -U's list should only contain one character per | |
| 434 .br | |
| 435 line on a plain text file. If you select this | |
| 436 .br | |
| 437 module then modules -A, -N, -S will be ignored. | |
| 438 .br | |
| 439 IE: | |
| 440 | |
| 441 ============= NOT ACTUAL LINE ON FILE =============== | |
| 442 .br | |
| 443 j | |
| 444 .br | |
| 445 1 | |
| 446 .br | |
| 447 @ | |
| 448 .br | |
| 449 0 | |
| 450 .br | |
| 451 z | |
| 452 .br | |
| 453 ============= NOT ACTUAL LINE ON FILE =============== | |
| 454 | |
| 455 If -A, -N, and/or -S options are selected then | |
| 456 .br | |
| 457 the modules will be combined. IE: | |
| 458 | |
| 459 pZa!ssword | |
| 460 .br | |
| 461 p0atssword | |
| 462 .br | |
| 463 passwor7d | |
| 464 .br | |
| 465 passwo*rLd | |
| 466 .br | |
| 467 ... | |
| 468 | |
| 469 -M MD5 Module: | |
| 470 .br | |
| 471 This module generates md5 hash sums for | |
| 472 .br | |
| 473 words listed in the selected dictionary. | |
| 474 .br | |
| 475 IE: | |
| 476 | |
| 477 5912d7bfd10f631f1715bf85bbb72d97 | |
| 478 .br | |
| 479 966e8fda594333563c02fa4b69765a5e | |
| 480 .br | |
| 481 900bc885d7553375aec470198a9514f3 | |
| 482 .br | |
| 483 97f014516561ef487ec368d6158eb3f4 | |
| 484 .br | |
| 485 ... | |
| 486 | |
| 487 | |
| 488 --wep-* WEP Modules: | |
| 489 .br | |
| 490 these two modules strip 5 or 13 character | |
| 491 .br | |
| 492 words from the selected dictionary and produce | |
| 493 .br | |
| 662 | 494 WEP compatible hex passwords. If your dictionary |
| 495 .br | |
| 496 does not contain 5 or 13 character words then | |
| 497 .br | |
| 498 splice3 will likely give an error. | |
| 499 | |
| 500 | |
| 501 --se-create Social Engineering Module: | |
| 502 .br | |
| 503 see the social engineering section below for | |
| 504 .br | |
| 505 details. | |
| 626 | 506 |
| 507 .SH | |
| 508 CHARACTERS | |
| 509 | |
| 510 splice3 appends alternating character tags to the beginning | |
| 511 .br | |
| 512 and/or ending of each password. By default splice3 will use | |
| 513 .br | |
| 514 all standard keyboard characters but you can choose to use | |
| 515 .br | |
| 516 specific combinations. If one or more of the following | |
| 517 .br | |
| 518 options is omitted then only the selected options will be | |
| 519 .br | |
| 520 used ; they will be combined. | |
| 521 | |
| 522 --letters Use letter characters | |
| 523 .br | |
| 524 Apassword | |
| 525 .br | |
| 526 passwordA | |
| 527 .br | |
| 528 abCpassword | |
| 529 .br | |
| 530 passwordxYz | |
| 531 .br | |
| 532 ... | |
| 533 | |
| 534 --numbers Use numbers characters | |
| 535 .br | |
| 536 1password | |
| 537 .br | |
| 538 password1 | |
| 539 .br | |
| 540 123password | |
| 541 .br | |
| 542 password098 | |
| 543 .br | |
| 544 ... | |
| 545 | |
| 546 --specials Use specials characters | |
| 547 .br | |
| 548 $password | |
| 549 .br | |
| 550 password^ | |
| 551 .br | |
| 552 %)!password | |
| 553 .br | |
| 554 password#*@ | |
| 555 .br | |
| 556 ... | |
| 557 | |
| 558 --custom Use custom characters from a list | |
| 559 .br | |
| 560 $password | |
| 561 .br | |
| 562 password^ | |
| 563 .br | |
| 564 %)!password | |
| 565 .br | |
| 566 password#*@ | |
| 567 .br | |
| 568 ... | |
| 569 | |
| 570 --custom list should only contain one character per | |
| 571 .br | |
| 572 line on a plain text file. If you select this | |
| 573 .br | |
| 574 module then other character flags will be ignored. | |
| 575 .br | |
| 576 If the custom list matches the selected dictionary | |
| 577 .br | |
| 578 then splice3 will run in exhaustive mode. | |
| 579 .br | |
| 580 IE: | |
| 581 | |
| 582 ============= NOT ACTUAL LINE ON FILE =============== | |
| 583 .br | |
| 584 j | |
| 585 .br | |
| 586 1 | |
| 587 .br | |
| 588 @ | |
| 589 .br | |
| 590 0 | |
| 591 .br | |
| 592 z | |
| 593 .br | |
| 594 ============= NOT ACTUAL LINE ON FILE =============== | |
| 595 | |
| 596 --letters, --numbers, and/or --specials | |
| 597 .br | |
| 598 Apassword6& | |
| 599 .br | |
| 600 7passwordA | |
| 601 .br | |
| 602 a*Cpassword9 | |
| 603 .br | |
| 604 a}password0Yz | |
| 605 .br | |
| 606 ... | |
| 607 | |
| 608 .SH | |
| 662 | 609 SOCIAL ENGINEERING |
| 610 | |
| 611 --se-create Social Engineering Module: | |
| 612 .br | |
| 613 splice3 is equipped with a social engineering module to create | |
| 614 .br | |
| 615 concatenated words from the selected dictionary. This module | |
| 616 .br | |
| 617 allows for "Module Stacking". IE, if you select other other | |
| 618 .br | |
| 619 modules when setting this flag then compiled words will also | |
| 620 .br | |
| 621 be incorporated into the algorithm as if they appeared on the | |
| 622 .br | |
| 623 the selected dictionary itself. | |
| 624 | |
| 625 .SH | |
| 626 | 626 DESHADOW |
| 627 | |
| 628 splice3 comes with its own small program to compare a created hash | |
| 629 .br | |
| 630 sum, those found in /etc/shadow with an existing one given through | |
| 631 .br | |
| 632 user input. When using the deshadow option you will need to set | |
| 633 .br | |
| 634 exactly one of the --getshadow or --setshadow options. There is no | |
| 635 .br | |
| 636 need to use the -c CMD or the -t TEST flags when using this option | |
| 637 .br | |
| 638 because the values for each will be preset. | |
| 639 | |
| 640 --getshadow Get the shadow info for a user | |
| 641 .br | |
| 642 see examples below for usage details. | |
| 643 | |
| 644 --setshadow Use the shadow info from a file. This file should be | |
| 645 .br | |
| 646 in plain text and contain only one line with the | |
| 647 .br | |
| 648 following syntax: | |
| 649 | |
| 650 ============= NOT ACTUAL LINE ON FILE =============== | |
| 651 .br | |
| 652 $HashingMethod$SaltValue$ActualHashItself | |
| 653 | |
| 654 ============= NOT ACTUAL LINE ON FILE =============== | |
| 655 | |
| 656 If you need to see an example Shadow entry you may | |
| 657 .br | |
| 658 use the following command: | |
| 659 | |
| 660 cat /etc/shadow | grep -i "$USER" | |
| 661 | |
| 662 .SH | |
| 663 EXHAUSTIVE | |
| 664 | |
| 665 splice3 is capable of mounting a standard exhaustive attack. | |
| 666 .br | |
| 667 An exhaustive attack is a sure\-fire method to crack any | |
| 668 .br | |
| 669 password but this can also take large amounts of time | |
| 670 .br | |
| 671 depending on the length of a password. If it's necessary to | |
| 672 .br | |
| 673 use an exhaustive bruteforcing algorithm you may do so with | |
| 674 .br | |
| 675 one of the following options: | |
| 676 | |
| 677 --exh-l | |
| 678 .br | |
| 679 This attack uses only letters. | |
| 680 | |
| 681 --exh-n | |
| 682 .br | |
| 683 This attack uses only numbers. | |
| 684 | |
| 685 --exh-s | |
| 686 .br | |
| 687 This attack uses only special characters. | |
| 688 | |
| 689 --exh-ln | |
| 690 .br | |
| 691 This attack uses only letters and numbers. | |
| 692 | |
| 693 --exh-ls | |
| 694 .br | |
| 695 This attack uses only letters and special characters. | |
| 696 | |
| 697 --exh-ns | |
| 698 .br | |
| 699 This attack uses only numbers and special characters. | |
| 700 | |
| 701 --exh-lns | |
| 702 .br | |
| 703 This attack uses all characters. | |
| 704 | |
|
669
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
705 --exh-custom |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
706 .br |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
707 This attack uses custom characters in a character list. IE: |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
708 .br |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
709 --exh-custom='CharList.txt' |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
710 .br |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
711 A character list should be in the following syntax: |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
712 |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
713 ============= NOT ACTUAL LINE ON FILE =============== |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
714 .br |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
715 j |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
716 .br |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
717 1 |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
718 .br |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
719 @ |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
720 .br |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
721 0 |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
722 .br |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
723 z |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
724 .br |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
725 ============= NOT ACTUAL LINE ON FILE =============== |
|
271fb597efc9
improved splice3's code. see contrib/splice3/CHANGES
d3v11 <d3v11@d3v11.ano>
parents:
662
diff
changeset
|
726 |
| 626 | 727 .SH |
| 728 STDOUT | |
| 729 | |
| 730 splice3 has the option to skip the command and test flags | |
| 731 .br | |
| 732 and print only the created passwords to stdout. This is a | |
| 733 .br | |
| 734 useful flag if you're going to pipe the output to stdin | |
| 735 .br | |
| 736 on another program. | |
| 737 | |
| 738 --stdout | |
| 739 .br | |
| 740 The output will look similar to the following: | |
| 741 .br | |
| 742 password | |
| 743 .br | |
| 744 qwerty | |
| 745 .br | |
| 746 123magick | |
| 747 .br | |
| 748 newpass | |
| 749 .br | |
| 750 john1965 | |
| 751 | |
| 752 .SH | |
| 753 REGEXP | |
| 754 | |
| 755 splice3 can create some regexp type functions | |
| 756 .br | |
| 757 using existing options: | |
| 758 | |
| 759 splice3 --command='echo onePASSWORDthree' --test='onetwothree' --exh-l | |
| 760 | |
| 761 splice3 -c 'echo johnPASSWORD65' --test='john1965' --exh-custom='MyList.txt' | |
| 762 | |
| 763 splice3 --command='echo ilovePASSWORD' -R --no-char --test='iloveqwerty' | |
| 764 | |
| 765 you may also want to see --se-create for more specific attacks. | |
| 766 | |
| 767 .SH | |
| 768 CONTROLS | |
| 769 | |
| 770 splice3 contains some options worth going over again. | |
| 771 | |
| 772 --command='<insert command> PASSWORD' #must contain regexp 'PASSWORD' | |
| 773 | |
| 774 --time='10, 1' #timed iterations | |
| 775 | |
| 776 --custom='file.txt', -U 'file.txt', --dictionary='file.txt', | |
| 777 .br | |
| 778 --exh-custom='file.txt' #custom wordlists and/or character lists | |
| 779 | |
| 780 --no-char #useful flag to only use the generated wordlist | |
| 781 .br | |
| 782 #no characters will be appended to the passwords | |
| 783 | |
| 784 --stdout #prints only passwords | |
| 785 | |
| 786 --debug #helps to troubleshoot | |
| 787 | |
| 788 .SH | |
| 789 EXAMPLES | |
| 790 | |
| 791 splice3 -c"unrar -pPASSWORD t file.rar" -t"All OK" -ACLNRS | |
| 792 | |
| 793 splice3 -c"sshpass -pPASSWORD ssh user@host" -d"wordlist" -L | |
| 794 | |
| 795 splice3 -c"smbclient -L 192.168.1.0 -Uusername%PASSWORD" -L | |
| 796 | |
| 797 splice3 --deshadow --getshadow="root" -ACLNRS | |
| 798 | |
| 799 splice3 --deshadow --setshadow="/home/user/shadow.txt" -ACLNRS | |
| 800 | |
| 801 splice3\\ | |
| 802 .br | |
| 803 --command='echo PASSWORD | aircrack-ng -b 00:11:22:33:44:55 -w - *.cap'\\ | |
| 804 .br | |
| 805 --wep-5 --wep-13 --no-char --dictionary='MyWords.txt'\\ | |
| 806 .br | |
| 807 --test='KEY FOUND' | |
| 808 | |
| 809 splice3 -c"curl --user <user[:PASSWORD]> https://www.example.com" -R | |
| 810 | |
| 811 .SH | |
| 812 LICENSE | |
| 813 | |
| 814 This program is free software: you can redistribute it and/or modify | |
| 815 .br | |
| 816 it under the terms of the GNU General Public License as published by | |
| 817 .br | |
| 818 the Free Software Foundation, either version 3 of the License, or | |
| 819 .br | |
| 820 (at your option) any later version. | |
| 821 | |
| 822 This program is distributed in the hope that it will be useful, | |
| 823 .br | |
| 824 but WITHOUT ANY WARRANTY; without even the implied warranty of | |
| 825 .br | |
| 826 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | |
| 827 .br | |
| 828 GNU General Public License for more details. | |
| 829 | |
| 830 You should have received a copy of the GNU General Public License | |
| 831 .br | |
| 832 along with this program. If not, see <http://www.gnu.org/licenses/>. |