|
626
|
1 .TH splice3 "1" "sep 2011" "splice3" "Brute Force Utilities" |
|
|
2 .SH |
|
|
3 NAME |
|
|
4 splice3 - manual page for splice3 |
|
|
5 |
|
|
6 .SH |
|
|
7 DESCRIPTION |
|
|
8 |
|
|
9 Brute Force Utilities For The Linux Shell. |
|
|
10 |
|
|
11 .SH |
|
|
12 OPTIONS |
|
|
13 -h, --help show the help message and exit |
|
|
14 |
|
|
15 -c, Parse passwords to this command |
|
|
16 .br |
|
|
17 Command must contain regexp PASSWORD. |
|
|
18 .br |
|
|
19 splice3 -c"command PASSWORD" |
|
|
20 |
|
|
21 -d Path to custom dictionary(wordlist) |
|
|
22 .br |
|
|
23 splice3 -d"/home/user/wordlist" |
|
|
24 .br |
|
|
25 If this option is unset then splice3 |
|
|
26 .br |
|
|
27 will use its default dictionary. |
|
|
28 |
|
|
29 --rtfm Show manual page and exit |
|
|
30 |
|
|
31 -r Path to restore file |
|
|
32 .br |
|
|
33 splice3 -r"/home/user/splice3.save" |
|
|
34 .br |
|
|
35 DO NOT USE MODIFIED OR NON-SPLICE |
|
|
36 .br |
|
|
37 SAVE FILES. |
|
|
38 |
|
|
39 -s Directory path to create save file |
|
|
40 .br |
|
|
41 splice3 -s"/home/user" |
|
|
42 |
|
|
43 -t Test output of -c's command |
|
|
44 .br |
|
|
45 splice3 -t"All OK" |
|
|
46 |
|
|
47 --time Manipulate timed iterations |
|
|
48 .br |
|
|
49 splice3 can pause its attack for |
|
|
50 .br |
|
|
51 a specified amount of seconds per |
|
|
52 .br |
|
|
53 every specified amount of iterations. |
|
|
54 .br |
|
|
55 splice3 --time="12, 360" |
|
|
56 .br |
|
|
57 The above will tell splice3 to pause |
|
|
58 .br |
|
|
59 360 seconds after trying every 12 passwords. |
|
|
60 |
|
|
61 -u Path to username list |
|
|
62 .br |
|
|
63 splice3 -u"/home/user/userlist" |
|
|
64 .br |
|
|
65 If you use this command the regexp |
|
|
66 .br |
|
|
67 `USERNAME' will be required in the |
|
|
68 .br |
|
|
69 given -c command. See -c flag for |
|
|
70 .br |
|
|
71 details. |
|
|
72 |
|
|
73 .br |
|
|
74 --exh-l Use an exhaustive attack with letters only |
|
|
75 |
|
|
76 .br |
|
|
77 --exh-n Use an exhaustive attack with numbers only |
|
|
78 |
|
|
79 .br |
|
|
80 --exh-s Use an exhaustive attack with special characters only |
|
|
81 |
|
|
82 .br |
|
|
83 --exh-ln Use an exhaustive attack with letters and numbers only |
|
|
84 |
|
|
85 .br |
|
|
86 --exh-ls Use an exhaustive attack with letters and special |
|
|
87 .br |
|
|
88 characters only |
|
|
89 |
|
|
90 .br |
|
|
91 --exh-ns Use an exhaustive attack with numbers and special |
|
|
92 .br |
|
|
93 characters only |
|
|
94 |
|
|
95 --exh-lns Use an exhaustive attack with all characters |
|
|
96 |
|
|
97 --exh-custom Use an exhaustive attack with custom characters |
|
|
98 .br |
|
|
99 splice3 --exh-custom='character list' |
|
|
100 |
|
|
101 --stdout Print only passwords to stdout |
|
|
102 |
|
|
103 -A Use alphabetical mixing module |
|
|
104 |
|
|
105 -B Use backwards module |
|
|
106 |
|
|
107 -C Use alternating caps module |
|
|
108 |
|
|
109 -L Use "L337" speak module |
|
|
110 |
|
|
111 -M Use MD5 module |
|
|
112 |
|
|
113 -N Use numerical mixing module |
|
|
114 |
|
|
115 -R Use regular words module |
|
|
116 |
|
|
117 -S Use special mixing module |
|
|
118 |
|
|
119 -U Use custom mixing module |
|
|
120 .br |
|
|
121 splice3 -U"/home/user/list" |
|
|
122 |
|
|
123 --wep-5 Use 5 char WEP module |
|
|
124 .br |
|
|
125 splice3 will strip 5 char words |
|
|
126 .br |
|
|
127 from the dictionary and convert |
|
|
128 .br |
|
|
129 them to WEP compatible passwords. |
|
|
130 |
|
|
131 --wep-13 Use 13 char WEP module |
|
|
132 .br |
|
|
133 splice3 will strip 13 char words |
|
|
134 .br |
|
|
135 from the dictionary and convert |
|
|
136 .br |
|
|
137 them to WEP compatible passwords. |
|
|
138 |
|
|
139 --letters Use letter characters |
|
|
140 |
|
|
141 --numbers Use number characters |
|
|
142 |
|
|
143 --specials Use special characters |
|
|
144 |
|
|
145 --no-char Override character usage |
|
|
146 |
|
|
147 --custom Use custom characters |
|
|
148 .br |
|
|
149 splice3 --custom="/home/user/list" |
|
|
150 |
|
|
151 --deshadow Crack shadow hash sums |
|
|
152 |
|
|
153 --getshadow Get the shadow info for a user |
|
|
154 .br |
|
|
155 splice3 --getshadow="username" |
|
|
156 .br |
|
|
157 See deshadow below for details. |
|
|
158 |
|
|
159 --setshadow Use the shadow info from a file |
|
|
160 .br |
|
|
161 splice3 --setshadow="/home/user/shadow" |
|
|
162 .br |
|
|
163 See deshadow below for details. |
|
|
164 |
|
658
|
165 --se-create a social engineering module. |
|
626
|
166 .br |
|
|
167 splice3 will create concatenated words from |
|
|
168 .br |
|
658
|
169 dictionary. |
|
626
|
170 |
|
|
171 --create Create a dictionary and exit. splice3 |
|
|
172 .br |
|
|
173 will create a dictionary with a user |
|
|
174 .br |
|
|
175 selected wordlist and the selected |
|
|
176 .br |
|
|
177 Modules. The new dictionary will be |
|
|
178 .br |
|
|
179 created in your current directory as |
|
|
180 .br |
|
|
181 splice3.create |
|
|
182 |
|
|
183 -v, --version Show splice3's version number and exit |
|
|
184 |
|
|
185 --debug Enable debugging |
|
|
186 .br |
|
|
187 Allows debugging and traceback reporting from splice3. |
|
|
188 |
|
|
189 .SH |
|
|
190 DICTIONARIES |
|
|
191 |
|
|
192 splice3 comes equipped with its own dictionary but is |
|
|
193 .br |
|
|
194 designed to use custom dictionaries as well. The |
|
|
195 .br |
|
|
196 dictionary should be in the following format: a plain |
|
|
197 .br |
|
|
198 text file with one word per line, no spaces between |
|
|
199 .br |
|
|
200 words, letters only. You do not have to follow the |
|
|
201 .br |
|
|
202 above guideline exactly but it is strongly suggested. |
|
|
203 .br |
|
|
204 IE: |
|
|
205 |
|
|
206 ============= NOT ACTUAL LINE ON FILE =============== |
|
|
207 .br |
|
|
208 qwerty |
|
|
209 .br |
|
|
210 john |
|
|
211 .br |
|
|
212 linux |
|
|
213 .br |
|
|
214 newpass |
|
|
215 .br |
|
|
216 princess |
|
|
217 .br |
|
|
218 hacker |
|
|
219 .br |
|
|
220 ============= NOT ACTUAL LINE ON FILE =============== |
|
|
221 |
|
|
222 .SH |
|
|
223 USERNAMES |
|
|
224 |
|
|
225 splice3 is capable of cycling through usernames as it |
|
|
226 .br |
|
|
227 would a dictionary. There is no default username list |
|
|
228 .br |
|
|
229 on splice3. The username list should be in the |
|
|
230 .br |
|
|
231 following format: a plain text file with one word per |
|
|
232 .br |
|
|
233 line, no spaces between words, letters only. You do |
|
|
234 .br |
|
|
235 not have to follow the above guideline exactly but it |
|
|
236 .br |
|
|
237 is strongly suggested. |
|
|
238 .br |
|
|
239 IE: |
|
|
240 |
|
|
241 ============= NOT ACTUAL LINE ON FILE =============== |
|
|
242 .br |
|
|
243 john |
|
|
244 .br |
|
|
245 admin |
|
|
246 .br |
|
|
247 root |
|
|
248 .br |
|
|
249 david |
|
|
250 .br |
|
|
251 fred |
|
|
252 .br |
|
|
253 ============= NOT ACTUAL LINE ON FILE =============== |
|
|
254 |
|
|
255 .SH |
|
|
256 SAVING AND RESTORING |
|
|
257 |
|
|
258 splice3 is capable of restarting where it was stopped |
|
|
259 .br |
|
|
260 by using the -r switch followed by the full path to |
|
|
261 .br |
|
|
262 a splice3.save file. DO NOT modify these files or |
|
|
263 .br |
|
|
264 splice3 may receive an error or not load at all. |
|
|
265 .br |
|
|
266 When restoring, if you set the -t switch you must |
|
|
267 .br |
|
|
268 manually set it again or splice3 will not test for |
|
|
269 .br |
|
|
270 specified output. If saving splice3's status, then |
|
|
271 .br |
|
|
272 splice3 will save to the specified directory as |
|
|
273 .br |
|
|
274 splice3.save. If splice3.save already exists it will |
|
|
275 .br |
|
|
276 be overwritten so change the name of any original |
|
|
277 .br |
|
|
278 copies if you want to keep them. If saving a splice3 |
|
|
279 .br |
|
|
280 session you should stop the process using the |
|
|
281 .br |
|
|
282 appropriate terminal feature before killing splice3 |
|
|
283 .br |
|
|
284 to avoid corrupting the save file. |
|
|
285 |
|
|
286 -s "/path/to/save/directory/" |
|
|
287 |
|
|
288 -r "/path/to/splice3.save/" |
|
|
289 .SH |
|
|
290 MODULES |
|
|
291 |
|
660
|
292 -A -B -C -L -M -N -R -S -U --wep-5 --wep-13 --se-create |
|
626
|
293 .br |
|
|
294 splice3 comes equipped with several modules that mangle |
|
|
295 .br |
|
|
296 the words in the selected dictionary to create probable |
|
|
297 .br |
|
|
298 password combinations. You may use as many of these |
|
|
299 .br |
|
|
300 modules as you want. Some modules can take a few or more |
|
|
301 .br |
|
|
302 minutes to enhance a dictionary depending on the size |
|
|
303 .br |
|
|
304 of the selected dictionary. |
|
|
305 |
|
|
306 -A Alphabetical Mixing Module: |
|
|
307 .br |
|
|
308 This module puts several combinations of alphabet |
|
|
309 .br |
|
|
310 characters inside the words in the selected |
|
|
311 .br |
|
|
312 dictionary. IE: |
|
|
313 |
|
|
314 pZassword |
|
|
315 .br |
|
|
316 pCatssword |
|
|
317 .br |
|
|
318 passworKd |
|
|
319 .br |
|
|
320 passwoJrLd |
|
|
321 .br |
|
|
322 ... |
|
|
323 |
|
|
324 -B Backwards Module: |
|
|
325 .br |
|
|
326 This module creates backwards words from the |
|
|
327 .br |
|
|
328 selected dictionary. IE: |
|
|
329 |
|
|
330 drowssap |
|
|
331 .br |
|
|
332 ... |
|
|
333 |
|
|
334 -C Capitalization Module: |
|
|
335 .br |
|
|
336 This module recreates the words in the selected |
|
|
337 .br |
|
|
338 dictionary with alternating capitalizations. |
|
|
339 .br |
|
|
340 IE: |
|
|
341 |
|
|
342 Password |
|
|
343 .br |
|
|
344 PAssword |
|
|
345 .br |
|
|
346 PaSsWoRd |
|
|
347 .br |
|
|
348 pAsSwOrD |
|
|
349 .br |
|
|
350 passwoRD |
|
|
351 .br |
|
|
352 ... |
|
|
353 |
|
|
354 -L L337 Speak Module: |
|
|
355 .br |
|
|
356 This module converts the words in the selected |
|
|
357 .br |
|
|
358 dictionary to several versions of "l337 speak". |
|
|
359 .br |
|
|
360 IE: |
|
|
361 |
|
|
362 p4ssword |
|
|
363 .br |
|
|
364 p455w0rd |
|
|
365 .br |
|
|
366 pa5sword |
|
|
367 .br |
|
|
368 ps@$$word |
|
|
369 .br |
|
|
370 ... |
|
|
371 |
|
|
372 -N Numerical Mixing Module: |
|
|
373 .br |
|
|
374 This module puts several combinations of number |
|
|
375 .br |
|
|
376 characters inside the words in the selected |
|
|
377 .br |
|
|
378 dictionary. IE: |
|
|
379 |
|
|
380 p2assword |
|
|
381 .br |
|
|
382 p5a8ssword |
|
|
383 .br |
|
|
384 passwor0d |
|
|
385 .br |
|
|
386 passwo6r9d |
|
|
387 .br |
|
|
388 ... |
|
|
389 |
|
|
390 -R Regular Words Module: |
|
|
391 .br |
|
|
392 This module tells splice3 to use the words in a |
|
|
393 .br |
|
|
394 selected dictionary as they are listed. |
|
|
395 |
|
|
396 |
|
|
397 -S Special Mixing Module: |
|
|
398 .br |
|
|
399 This module puts several combinations of special |
|
|
400 .br |
|
|
401 characters inside the words in the selected |
|
|
402 .br |
|
|
403 dictionary. IE: |
|
|
404 |
|
|
405 p!assword |
|
|
406 .br |
|
|
407 p@a$ssword |
|
|
408 .br |
|
|
409 passwor(d |
|
|
410 .br |
|
|
411 passwo-r+d |
|
|
412 .br |
|
|
413 ... |
|
|
414 |
|
|
415 -U Custom Mixing Module: |
|
|
416 .br |
|
|
417 This module puts several combinations of user |
|
|
418 .br |
|
|
419 selected characters inside the words from the |
|
|
420 .br |
|
|
421 selected character list. IE: |
|
|
422 |
|
|
423 p!assword |
|
|
424 .br |
|
|
425 p@a$ssword |
|
|
426 .br |
|
|
427 passwor(d |
|
|
428 .br |
|
|
429 passwo-r+d |
|
|
430 .br |
|
|
431 ... |
|
|
432 |
|
|
433 -U's list should only contain one character per |
|
|
434 .br |
|
|
435 line on a plain text file. If you select this |
|
|
436 .br |
|
|
437 module then modules -A, -N, -S will be ignored. |
|
|
438 .br |
|
|
439 IE: |
|
|
440 |
|
|
441 ============= NOT ACTUAL LINE ON FILE =============== |
|
|
442 .br |
|
|
443 j |
|
|
444 .br |
|
|
445 1 |
|
|
446 .br |
|
|
447 @ |
|
|
448 .br |
|
|
449 0 |
|
|
450 .br |
|
|
451 z |
|
|
452 .br |
|
|
453 ============= NOT ACTUAL LINE ON FILE =============== |
|
|
454 |
|
|
455 If -A, -N, and/or -S options are selected then |
|
|
456 .br |
|
|
457 the modules will be combined. IE: |
|
|
458 |
|
|
459 pZa!ssword |
|
|
460 .br |
|
|
461 p0atssword |
|
|
462 .br |
|
|
463 passwor7d |
|
|
464 .br |
|
|
465 passwo*rLd |
|
|
466 .br |
|
|
467 ... |
|
|
468 |
|
|
469 -M MD5 Module: |
|
|
470 .br |
|
|
471 This module generates md5 hash sums for |
|
|
472 .br |
|
|
473 words listed in the selected dictionary. |
|
|
474 .br |
|
|
475 IE: |
|
|
476 |
|
|
477 5912d7bfd10f631f1715bf85bbb72d97 |
|
|
478 .br |
|
|
479 966e8fda594333563c02fa4b69765a5e |
|
|
480 .br |
|
|
481 900bc885d7553375aec470198a9514f3 |
|
|
482 .br |
|
|
483 97f014516561ef487ec368d6158eb3f4 |
|
|
484 .br |
|
|
485 ... |
|
|
486 |
|
|
487 |
|
|
488 --wep-* WEP Modules: |
|
|
489 .br |
|
|
490 these two modules strip 5 or 13 character |
|
|
491 .br |
|
|
492 words from the selected dictionary and produce |
|
|
493 .br |
|
662
|
494 WEP compatible hex passwords. If your dictionary |
|
|
495 .br |
|
|
496 does not contain 5 or 13 character words then |
|
|
497 .br |
|
|
498 splice3 will likely give an error. |
|
|
499 |
|
|
500 |
|
|
501 --se-create Social Engineering Module: |
|
|
502 .br |
|
|
503 see the social engineering section below for |
|
|
504 .br |
|
|
505 details. |
|
626
|
506 |
|
|
507 .SH |
|
|
508 CHARACTERS |
|
|
509 |
|
|
510 splice3 appends alternating character tags to the beginning |
|
|
511 .br |
|
|
512 and/or ending of each password. By default splice3 will use |
|
|
513 .br |
|
|
514 all standard keyboard characters but you can choose to use |
|
|
515 .br |
|
|
516 specific combinations. If one or more of the following |
|
|
517 .br |
|
|
518 options is omitted then only the selected options will be |
|
|
519 .br |
|
|
520 used ; they will be combined. |
|
|
521 |
|
|
522 --letters Use letter characters |
|
|
523 .br |
|
|
524 Apassword |
|
|
525 .br |
|
|
526 passwordA |
|
|
527 .br |
|
|
528 abCpassword |
|
|
529 .br |
|
|
530 passwordxYz |
|
|
531 .br |
|
|
532 ... |
|
|
533 |
|
|
534 --numbers Use numbers characters |
|
|
535 .br |
|
|
536 1password |
|
|
537 .br |
|
|
538 password1 |
|
|
539 .br |
|
|
540 123password |
|
|
541 .br |
|
|
542 password098 |
|
|
543 .br |
|
|
544 ... |
|
|
545 |
|
|
546 --specials Use specials characters |
|
|
547 .br |
|
|
548 $password |
|
|
549 .br |
|
|
550 password^ |
|
|
551 .br |
|
|
552 %)!password |
|
|
553 .br |
|
|
554 password#*@ |
|
|
555 .br |
|
|
556 ... |
|
|
557 |
|
|
558 --custom Use custom characters from a list |
|
|
559 .br |
|
|
560 $password |
|
|
561 .br |
|
|
562 password^ |
|
|
563 .br |
|
|
564 %)!password |
|
|
565 .br |
|
|
566 password#*@ |
|
|
567 .br |
|
|
568 ... |
|
|
569 |
|
|
570 --custom list should only contain one character per |
|
|
571 .br |
|
|
572 line on a plain text file. If you select this |
|
|
573 .br |
|
|
574 module then other character flags will be ignored. |
|
|
575 .br |
|
|
576 If the custom list matches the selected dictionary |
|
|
577 .br |
|
|
578 then splice3 will run in exhaustive mode. |
|
|
579 .br |
|
|
580 IE: |
|
|
581 |
|
|
582 ============= NOT ACTUAL LINE ON FILE =============== |
|
|
583 .br |
|
|
584 j |
|
|
585 .br |
|
|
586 1 |
|
|
587 .br |
|
|
588 @ |
|
|
589 .br |
|
|
590 0 |
|
|
591 .br |
|
|
592 z |
|
|
593 .br |
|
|
594 ============= NOT ACTUAL LINE ON FILE =============== |
|
|
595 |
|
|
596 --letters, --numbers, and/or --specials |
|
|
597 .br |
|
|
598 Apassword6& |
|
|
599 .br |
|
|
600 7passwordA |
|
|
601 .br |
|
|
602 a*Cpassword9 |
|
|
603 .br |
|
|
604 a}password0Yz |
|
|
605 .br |
|
|
606 ... |
|
|
607 |
|
|
608 .SH |
|
662
|
609 SOCIAL ENGINEERING |
|
|
610 |
|
|
611 --se-create Social Engineering Module: |
|
|
612 .br |
|
|
613 splice3 is equipped with a social engineering module to create |
|
|
614 .br |
|
|
615 concatenated words from the selected dictionary. This module |
|
|
616 .br |
|
|
617 allows for "Module Stacking". IE, if you select other other |
|
|
618 .br |
|
|
619 modules when setting this flag then compiled words will also |
|
|
620 .br |
|
|
621 be incorporated into the algorithm as if they appeared on the |
|
|
622 .br |
|
|
623 the selected dictionary itself. |
|
|
624 |
|
|
625 .SH |
|
626
|
626 DESHADOW |
|
|
627 |
|
|
628 splice3 comes with its own small program to compare a created hash |
|
|
629 .br |
|
|
630 sum, those found in /etc/shadow with an existing one given through |
|
|
631 .br |
|
|
632 user input. When using the deshadow option you will need to set |
|
|
633 .br |
|
|
634 exactly one of the --getshadow or --setshadow options. There is no |
|
|
635 .br |
|
|
636 need to use the -c CMD or the -t TEST flags when using this option |
|
|
637 .br |
|
|
638 because the values for each will be preset. |
|
|
639 |
|
|
640 --getshadow Get the shadow info for a user |
|
|
641 .br |
|
|
642 see examples below for usage details. |
|
|
643 |
|
|
644 --setshadow Use the shadow info from a file. This file should be |
|
|
645 .br |
|
|
646 in plain text and contain only one line with the |
|
|
647 .br |
|
|
648 following syntax: |
|
|
649 |
|
|
650 ============= NOT ACTUAL LINE ON FILE =============== |
|
|
651 .br |
|
|
652 $HashingMethod$SaltValue$ActualHashItself |
|
|
653 |
|
|
654 ============= NOT ACTUAL LINE ON FILE =============== |
|
|
655 |
|
|
656 If you need to see an example Shadow entry you may |
|
|
657 .br |
|
|
658 use the following command: |
|
|
659 |
|
|
660 cat /etc/shadow | grep -i "$USER" |
|
|
661 |
|
|
662 .SH |
|
|
663 EXHAUSTIVE |
|
|
664 |
|
|
665 splice3 is capable of mounting a standard exhaustive attack. |
|
|
666 .br |
|
|
667 An exhaustive attack is a sure\-fire method to crack any |
|
|
668 .br |
|
|
669 password but this can also take large amounts of time |
|
|
670 .br |
|
|
671 depending on the length of a password. If it's necessary to |
|
|
672 .br |
|
|
673 use an exhaustive bruteforcing algorithm you may do so with |
|
|
674 .br |
|
|
675 one of the following options: |
|
|
676 |
|
|
677 --exh-l |
|
|
678 .br |
|
|
679 This attack uses only letters. |
|
|
680 |
|
|
681 --exh-n |
|
|
682 .br |
|
|
683 This attack uses only numbers. |
|
|
684 |
|
|
685 --exh-s |
|
|
686 .br |
|
|
687 This attack uses only special characters. |
|
|
688 |
|
|
689 --exh-ln |
|
|
690 .br |
|
|
691 This attack uses only letters and numbers. |
|
|
692 |
|
|
693 --exh-ls |
|
|
694 .br |
|
|
695 This attack uses only letters and special characters. |
|
|
696 |
|
|
697 --exh-ns |
|
|
698 .br |
|
|
699 This attack uses only numbers and special characters. |
|
|
700 |
|
|
701 --exh-lns |
|
|
702 .br |
|
|
703 This attack uses all characters. |
|
|
704 |
|
|
705 .SH |
|
|
706 STDOUT |
|
|
707 |
|
|
708 splice3 has the option to skip the command and test flags |
|
|
709 .br |
|
|
710 and print only the created passwords to stdout. This is a |
|
|
711 .br |
|
|
712 useful flag if you're going to pipe the output to stdin |
|
|
713 .br |
|
|
714 on another program. |
|
|
715 |
|
|
716 --stdout |
|
|
717 .br |
|
|
718 The output will look similar to the following: |
|
|
719 .br |
|
|
720 password |
|
|
721 .br |
|
|
722 qwerty |
|
|
723 .br |
|
|
724 123magick |
|
|
725 .br |
|
|
726 newpass |
|
|
727 .br |
|
|
728 john1965 |
|
|
729 |
|
|
730 .SH |
|
|
731 REGEXP |
|
|
732 |
|
|
733 splice3 can create some regexp type functions |
|
|
734 .br |
|
|
735 using existing options: |
|
|
736 |
|
|
737 splice3 --command='echo onePASSWORDthree' --test='onetwothree' --exh-l |
|
|
738 |
|
|
739 splice3 -c 'echo johnPASSWORD65' --test='john1965' --exh-custom='MyList.txt' |
|
|
740 |
|
|
741 splice3 --command='echo ilovePASSWORD' -R --no-char --test='iloveqwerty' |
|
|
742 |
|
|
743 you may also want to see --se-create for more specific attacks. |
|
|
744 |
|
|
745 .SH |
|
|
746 CONTROLS |
|
|
747 |
|
|
748 splice3 contains some options worth going over again. |
|
|
749 |
|
|
750 --command='<insert command> PASSWORD' #must contain regexp 'PASSWORD' |
|
|
751 |
|
|
752 --time='10, 1' #timed iterations |
|
|
753 |
|
|
754 --custom='file.txt', -U 'file.txt', --dictionary='file.txt', |
|
|
755 .br |
|
|
756 --exh-custom='file.txt' #custom wordlists and/or character lists |
|
|
757 |
|
|
758 --no-char #useful flag to only use the generated wordlist |
|
|
759 .br |
|
|
760 #no characters will be appended to the passwords |
|
|
761 |
|
|
762 --stdout #prints only passwords |
|
|
763 |
|
|
764 --debug #helps to troubleshoot |
|
|
765 |
|
|
766 .SH |
|
|
767 EXAMPLES |
|
|
768 |
|
|
769 splice3 -c"unrar -pPASSWORD t file.rar" -t"All OK" -ACLNRS |
|
|
770 |
|
|
771 splice3 -c"sshpass -pPASSWORD ssh user@host" -d"wordlist" -L |
|
|
772 |
|
|
773 splice3 -c"smbclient -L 192.168.1.0 -Uusername%PASSWORD" -L |
|
|
774 |
|
|
775 splice3 --deshadow --getshadow="root" -ACLNRS |
|
|
776 |
|
|
777 splice3 --deshadow --setshadow="/home/user/shadow.txt" -ACLNRS |
|
|
778 |
|
|
779 splice3\\ |
|
|
780 .br |
|
|
781 --command='echo PASSWORD | aircrack-ng -b 00:11:22:33:44:55 -w - *.cap'\\ |
|
|
782 .br |
|
|
783 --wep-5 --wep-13 --no-char --dictionary='MyWords.txt'\\ |
|
|
784 .br |
|
|
785 --test='KEY FOUND' |
|
|
786 |
|
|
787 splice3 -c"curl --user <user[:PASSWORD]> https://www.example.com" -R |
|
|
788 |
|
|
789 .SH |
|
|
790 LICENSE |
|
|
791 |
|
|
792 This program is free software: you can redistribute it and/or modify |
|
|
793 .br |
|
|
794 it under the terms of the GNU General Public License as published by |
|
|
795 .br |
|
|
796 the Free Software Foundation, either version 3 of the License, or |
|
|
797 .br |
|
|
798 (at your option) any later version. |
|
|
799 |
|
|
800 This program is distributed in the hope that it will be useful, |
|
|
801 .br |
|
|
802 but WITHOUT ANY WARRANTY; without even the implied warranty of |
|
|
803 .br |
|
|
804 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|
|
805 .br |
|
|
806 GNU General Public License for more details. |
|
|
807 |
|
|
808 You should have received a copy of the GNU General Public License |
|
|
809 .br |
|
|
810 along with this program. If not, see <http://www.gnu.org/licenses/>. |
