|
688
|
1 .TH SpliceX "" "" "" "" |
|
|
2 __________ _ _ __ __ ______ |
|
|
3 / / / / ___| _ __ | (_) ___ ___\\ \\/ / / / / / |
|
|
4 / / / /\\___ \\| '_ \\| | |/ __/ _ \\\\ / / / / / |
|
|
5 / / / / ___) | |_) | | | (_| __// \\ / / / / |
|
|
6 /_/_/_/ |____/| .__/|_|_|\\___\\___/_/\\_\\/_/_/_/ |
|
|
7 |_| |
|
|
8 |
|
|
9 .:Brute Force Utilities For GNU/Linux:. |
|
|
10 |
|
|
11 |
|
|
12 SpliceX is free software: you can redistribute it and/or modify it under |
|
|
13 the terms of the GNU General Public License as published by the Free |
|
|
14 Software Foundation, either version 3 of the License, or (at your option) |
|
|
15 any later version. |
|
|
16 |
|
|
17 SpliceX is distributed in the hope that it will be useful, but WITHOUT |
|
|
18 ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or |
|
|
19 FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License |
|
|
20 for more details. <http://www.gnu.org/licenses/> |
|
|
21 |
|
|
22 |
|
|
23 |
|
|
24 .SH |
|
|
25 OPTIONS |
|
|
26 |
|
|
27 --help Show help display and exit |
|
|
28 |
|
|
29 --command Parse passwords to this command |
|
695
|
30 splicex --command='<command> PASSWORD' |
|
688
|
31 |
|
|
32 --dictionary Path to custom dictionary(wordlist) |
|
695
|
33 splicex --dictionary='WordList.txt' |
|
688
|
34 |
|
|
35 --rtfm Show manual page and exit |
|
|
36 |
|
|
37 --restore Path to restore file |
|
695
|
38 splicex --restore='splicex.save' |
|
688
|
39 |
|
|
40 --save Directory path to create save file |
|
695
|
41 splicex --save=/home/$USER/ |
|
688
|
42 |
|
|
43 --test Test output of command |
|
695
|
44 splicex --test='Password Ok' |
|
688
|
45 |
|
|
46 --time Manipulate timed iterations |
|
695
|
47 splicex --time='12, 3' |
|
688
|
48 |
|
|
49 --usernames Path to username list |
|
695
|
50 splicex --usernames='UserList.txt' |
|
688
|
51 |
|
|
52 --exh-l Use an exhaustive attack with letters only |
|
|
53 |
|
|
54 --exh-n Use an exhaustive attack with numbers only |
|
|
55 |
|
|
56 --exh-s Use an exhaustive attack with special characters only |
|
|
57 |
|
|
58 --exh-ln Use an exhaustive attack with letters and numbers only |
|
|
59 |
|
|
60 --exh-ls Use an exhaustive attack with letters and special |
|
|
61 characters only |
|
|
62 |
|
|
63 --exh-ns Use an exhaustive attack with numbers and special |
|
|
64 characters only |
|
|
65 |
|
|
66 --exh-all Use an exhaustive attack with all characters |
|
|
67 |
|
|
68 --exh-custom Use an exhaustive attack with custom characters |
|
695
|
69 splicex --exh-custom='CharsList.txt' |
|
688
|
70 |
|
|
71 --stdout Print only passwords to stdout |
|
|
72 |
|
|
73 -A Use alphabetical mixing module |
|
|
74 |
|
|
75 -B Use backwords module |
|
|
76 |
|
|
77 -C Use alternating caps module |
|
|
78 |
|
|
79 -L Use "L337" speak module |
|
|
80 |
|
|
81 -M Use MD5 module |
|
|
82 |
|
|
83 -N Use numerical mixing module |
|
|
84 |
|
|
85 -R Use regular words module |
|
|
86 |
|
|
87 -S Use special mixing module |
|
|
88 |
|
|
89 --mix-custom Use custom mixing module |
|
695
|
90 splicex --mix-custom='CharsList.txt' |
|
688
|
91 |
|
|
92 --wep-5 Use 5 character WEP module |
|
|
93 |
|
|
94 --wep-13 Use 13 character WEP module |
|
|
95 |
|
|
96 --wep-* Use 5 and 13 character WEP module |
|
|
97 |
|
|
98 --letters Use letter characters |
|
|
99 |
|
|
100 --numbers Use number characters |
|
|
101 |
|
|
102 --specials Use special characters |
|
|
103 |
|
|
104 --char-all Use all characters |
|
|
105 |
|
|
106 --no-char Override character usage |
|
|
107 |
|
|
108 --char-length Start and end with set character lengths |
|
|
109 |
|
|
110 --custom Use custom characters |
|
695
|
111 splicex --custom='CharsList.txt' |
|
688
|
112 |
|
|
113 --deshadow Crack shadow hash sums |
|
|
114 |
|
|
115 --get-shadow Get the shadow info for a user |
|
695
|
116 splicex --get-shadow=$USER |
|
688
|
117 |
|
|
118 --set-shadow Use the shadow info from a file |
|
695
|
119 splicex --set-shadow='UserShadow.txt' |
|
688
|
120 |
|
|
121 --se-module Use the social engineering module |
|
|
122 |
|
|
123 --create Create a dictionary |
|
|
124 |
|
|
125 --debug Enable debugging |
|
|
126 |
|
|
127 .SH |
|
|
128 DICTIONARIES |
|
|
129 |
|
|
130 splicex comes equipped with its own dictionary but is |
|
|
131 .br |
|
|
132 designed to use custom dictionaries as well. The |
|
|
133 .br |
|
|
134 dictionary should be in the following format: a plain |
|
|
135 .br |
|
|
136 text file with one word per line, no spaces between |
|
|
137 .br |
|
|
138 words, letters only. You do not have to follow the |
|
|
139 .br |
|
|
140 above guideline exactly but it is strongly suggested. |
|
|
141 .br |
|
|
142 IE: |
|
|
143 |
|
|
144 ============= NOT ACTUAL LINE ON FILE =============== |
|
|
145 .br |
|
|
146 qwerty |
|
|
147 .br |
|
|
148 john |
|
|
149 .br |
|
|
150 linux |
|
|
151 .br |
|
|
152 newpass |
|
|
153 .br |
|
|
154 princess |
|
|
155 .br |
|
|
156 hacker |
|
|
157 .br |
|
|
158 ============= NOT ACTUAL LINE ON FILE =============== |
|
|
159 |
|
|
160 .SH |
|
|
161 USERNAMES |
|
|
162 |
|
|
163 splicex is capable of cycling through usernames as it |
|
|
164 .br |
|
|
165 would a dictionary. There is no default username list |
|
|
166 .br |
|
|
167 on splicex. The username list should be in the |
|
|
168 .br |
|
|
169 following format: a plain text file with one word per |
|
|
170 .br |
|
|
171 line, no spaces between words, letters only. You do |
|
|
172 .br |
|
|
173 not have to follow the above guideline exactly but it |
|
|
174 .br |
|
|
175 is strongly suggested. |
|
|
176 .br |
|
|
177 IE: |
|
|
178 |
|
|
179 ============= NOT ACTUAL LINE ON FILE =============== |
|
|
180 .br |
|
|
181 john |
|
|
182 .br |
|
|
183 admin |
|
|
184 .br |
|
|
185 root |
|
|
186 .br |
|
|
187 david |
|
|
188 .br |
|
|
189 fred |
|
|
190 .br |
|
|
191 ============= NOT ACTUAL LINE ON FILE =============== |
|
|
192 |
|
|
193 .SH |
|
|
194 SAVING AND RESTORING |
|
|
195 |
|
|
196 splicex is capable of restarting where it was stopped |
|
|
197 .br |
|
|
198 by using the --restore switch followed by the full path to |
|
|
199 .br |
|
|
200 a splicex.save file. DO NOT modify these files or |
|
|
201 .br |
|
|
202 splicex may receive an error or not load at all. |
|
|
203 .br |
|
|
204 When restoring, if you set the --test switch you must |
|
|
205 .br |
|
|
206 manually set it again or splicex will not test for |
|
|
207 .br |
|
|
208 specified output. If saving splicex's status, then |
|
|
209 .br |
|
|
210 splicex will save to the specified directory as |
|
|
211 .br |
|
|
212 splicex.save. If splicex.save already exists it will |
|
|
213 .br |
|
|
214 be overwritten so change the name of any original |
|
|
215 .br |
|
|
216 copies if you want to keep them. If saving a splicex |
|
|
217 .br |
|
|
218 session you should stop the process using the |
|
|
219 .br |
|
|
220 appropriate terminal feature before killing splicex |
|
|
221 .br |
|
|
222 to avoid corrupting the save file. |
|
|
223 |
|
|
224 --save="/path/to/save/directory/" |
|
|
225 |
|
|
226 --restore="/path/to/splicex.save/" |
|
|
227 .SH |
|
|
228 MODULES |
|
|
229 |
|
|
230 -A -B -C -L -M -N -R -S --mix-custom --wep-5 --wep-13 --wep-* --se-module |
|
|
231 .br |
|
|
232 splicex comes equipped with several modules that mangle |
|
|
233 .br |
|
|
234 the words in the selected dictionary to create probable |
|
|
235 .br |
|
|
236 password combinations. You may use as many of these |
|
|
237 .br |
|
|
238 modules as you want. Some modules can take a few or more |
|
|
239 .br |
|
|
240 minutes to enhance a dictionary depending on the size |
|
|
241 .br |
|
|
242 of the selected dictionary. |
|
|
243 |
|
|
244 -A Alphabetical Mixing Module: |
|
|
245 .br |
|
|
246 This module puts several combinations of alphabet |
|
|
247 .br |
|
|
248 characters inside the words in the selected |
|
|
249 .br |
|
|
250 dictionary. IE: |
|
|
251 |
|
|
252 pZassword |
|
|
253 .br |
|
|
254 pCatssword |
|
|
255 .br |
|
|
256 passworKd |
|
|
257 .br |
|
|
258 passwoJrLd |
|
|
259 .br |
|
|
260 ... |
|
|
261 |
|
|
262 -B Backwards Module: |
|
|
263 .br |
|
|
264 This module creates backwards words from the |
|
|
265 .br |
|
|
266 selected dictionary. IE: |
|
|
267 |
|
|
268 drowssap |
|
|
269 .br |
|
|
270 ... |
|
|
271 |
|
|
272 -C Capitalization Module: |
|
|
273 .br |
|
|
274 This module recreates the words in the selected |
|
|
275 .br |
|
|
276 dictionary with alternating capitalizations. |
|
|
277 .br |
|
|
278 IE: |
|
|
279 |
|
|
280 Password |
|
|
281 .br |
|
|
282 PAssword |
|
|
283 .br |
|
|
284 PaSsWoRd |
|
|
285 .br |
|
|
286 pAsSwOrD |
|
|
287 .br |
|
|
288 passwoRD |
|
|
289 .br |
|
|
290 ... |
|
|
291 |
|
|
292 -L L337 Speak Module: |
|
|
293 .br |
|
|
294 This module converts the words in the selected |
|
|
295 .br |
|
|
296 dictionary to several versions of "l337 speak". |
|
|
297 .br |
|
|
298 IE: |
|
|
299 |
|
|
300 p4ssword |
|
|
301 .br |
|
|
302 p455w0rd |
|
|
303 .br |
|
|
304 pa5sword |
|
|
305 .br |
|
|
306 ps@$$word |
|
|
307 .br |
|
|
308 ... |
|
|
309 |
|
|
310 -N Numerical Mixing Module: |
|
|
311 .br |
|
|
312 This module puts several combinations of number |
|
|
313 .br |
|
|
314 characters inside the words in the selected |
|
|
315 .br |
|
|
316 dictionary. IE: |
|
|
317 |
|
|
318 p2assword |
|
|
319 .br |
|
|
320 p5a8ssword |
|
|
321 .br |
|
|
322 passwor0d |
|
|
323 .br |
|
|
324 passwo6r9d |
|
|
325 .br |
|
|
326 ... |
|
|
327 |
|
|
328 -R Regular Words Module: |
|
|
329 .br |
|
|
330 This module tells splicex to use the words in a |
|
|
331 .br |
|
|
332 selected dictionary as they are listed. |
|
|
333 |
|
|
334 |
|
|
335 -S Special Mixing Module: |
|
|
336 .br |
|
|
337 This module puts several combinations of special |
|
|
338 .br |
|
|
339 characters inside the words in the selected |
|
|
340 .br |
|
|
341 dictionary. IE: |
|
|
342 |
|
|
343 p!assword |
|
|
344 .br |
|
|
345 p@a$ssword |
|
|
346 .br |
|
|
347 passwor(d |
|
|
348 .br |
|
|
349 passwo-r+d |
|
|
350 .br |
|
|
351 ... |
|
|
352 |
|
|
353 --mix-custom Custom Mixing Module: |
|
|
354 .br |
|
|
355 This module puts several combinations of user |
|
|
356 .br |
|
|
357 selected characters inside the words from the |
|
|
358 .br |
|
|
359 selected character list. IE: |
|
|
360 |
|
|
361 p!assword |
|
|
362 .br |
|
|
363 p@a$ssword |
|
|
364 .br |
|
|
365 passwor(d |
|
|
366 .br |
|
|
367 passwo-r+d |
|
|
368 .br |
|
|
369 ... |
|
|
370 |
|
|
371 --mix-custom's list should only contain one character per |
|
|
372 .br |
|
|
373 line on a plain text file. If you select this |
|
|
374 .br |
|
|
375 module then modules -A, -N, -S will be ignored. |
|
|
376 .br |
|
|
377 IE: |
|
|
378 |
|
|
379 ============= NOT ACTUAL LINE ON FILE =============== |
|
|
380 .br |
|
|
381 j |
|
|
382 .br |
|
|
383 1 |
|
|
384 .br |
|
|
385 @ |
|
|
386 .br |
|
|
387 0 |
|
|
388 .br |
|
|
389 z |
|
|
390 .br |
|
|
391 ============= NOT ACTUAL LINE ON FILE =============== |
|
|
392 |
|
|
393 If -A, -N, and/or -S options are selected then |
|
|
394 .br |
|
|
395 the modules will be combined. see also --char-all. IE: |
|
|
396 |
|
|
397 pZa!ssword |
|
|
398 .br |
|
|
399 p0atssword |
|
|
400 .br |
|
|
401 passwor7d |
|
|
402 .br |
|
|
403 passwo*rLd |
|
|
404 .br |
|
|
405 ... |
|
|
406 |
|
|
407 -M MD5 Module: |
|
|
408 .br |
|
|
409 This module generates md5 hash sums for |
|
|
410 .br |
|
|
411 words listed in the selected dictionary. |
|
|
412 .br |
|
|
413 IE: |
|
|
414 |
|
|
415 5912d7bfd10f631f1715bf85bbb72d97 |
|
|
416 .br |
|
|
417 966e8fda594333563c02fa4b69765a5e |
|
|
418 .br |
|
|
419 900bc885d7553375aec470198a9514f3 |
|
|
420 .br |
|
|
421 97f014516561ef487ec368d6158eb3f4 |
|
|
422 .br |
|
|
423 ... |
|
|
424 |
|
|
425 |
|
|
426 --wep-*, --wep-5, --wep-13 WEP Modules: |
|
|
427 .br |
|
|
428 these two modules strip 5 or 13 character |
|
|
429 .br |
|
|
430 words from the selected dictionary and produce |
|
|
431 .br |
|
|
432 WEP compatible hex passwords. If your dictionary |
|
|
433 .br |
|
|
434 does not contain 5 or 13 character words then |
|
|
435 .br |
|
|
436 splicex will likely give an error. |
|
|
437 |
|
|
438 |
|
|
439 --se-module Social Engineering Module: |
|
|
440 .br |
|
|
441 see the social engineering section below for |
|
|
442 .br |
|
|
443 details. |
|
|
444 |
|
|
445 .SH |
|
|
446 CHARACTERS |
|
|
447 |
|
|
448 splicex appends alternating character tags to the beginning |
|
|
449 .br |
|
|
450 and/or ending of each password. By default splicex will use |
|
|
451 .br |
|
|
452 all standard keyboard characters but you can choose to use |
|
|
453 .br |
|
|
454 specific combinations. If one or more of the following |
|
|
455 .br |
|
|
456 options is omitted then only the selected options will be |
|
|
457 .br |
|
|
458 used ; they will be combined. |
|
|
459 |
|
|
460 --letters Use letter characters |
|
|
461 .br |
|
|
462 Apassword |
|
|
463 .br |
|
|
464 passwordA |
|
|
465 .br |
|
|
466 abCpassword |
|
|
467 .br |
|
|
468 passwordxYz |
|
|
469 .br |
|
|
470 ... |
|
|
471 |
|
|
472 --numbers Use numbers characters |
|
|
473 .br |
|
|
474 1password |
|
|
475 .br |
|
|
476 password1 |
|
|
477 .br |
|
|
478 123password |
|
|
479 .br |
|
|
480 password098 |
|
|
481 .br |
|
|
482 ... |
|
|
483 |
|
|
484 --specials Use specials characters |
|
|
485 .br |
|
|
486 $password |
|
|
487 .br |
|
|
488 password^ |
|
|
489 .br |
|
|
490 %)!password |
|
|
491 .br |
|
|
492 password#*@ |
|
|
493 .br |
|
|
494 ... |
|
|
495 |
|
|
496 --custom Use custom characters from a list |
|
|
497 .br |
|
|
498 $password |
|
|
499 .br |
|
|
500 password^ |
|
|
501 .br |
|
|
502 %)!password |
|
|
503 .br |
|
|
504 password#*@ |
|
|
505 .br |
|
|
506 ... |
|
|
507 |
|
|
508 --custom list should only contain one character per |
|
|
509 .br |
|
|
510 line on a plain text file. If you select this |
|
|
511 .br |
|
|
512 module then other character flags will be ignored. |
|
|
513 .br |
|
|
514 If the custom list matches the selected dictionary |
|
|
515 .br |
|
|
516 then splicex will run in exhaustive mode. |
|
|
517 .br |
|
|
518 IE: |
|
|
519 |
|
|
520 ============= NOT ACTUAL LINE ON FILE =============== |
|
|
521 .br |
|
|
522 j |
|
|
523 .br |
|
|
524 1 |
|
|
525 .br |
|
|
526 @ |
|
|
527 .br |
|
|
528 0 |
|
|
529 .br |
|
|
530 z |
|
|
531 .br |
|
|
532 ============= NOT ACTUAL LINE ON FILE =============== |
|
|
533 |
|
|
534 --letters, --numbers, and/or --specials |
|
|
535 .br |
|
|
536 Apassword6& |
|
|
537 .br |
|
|
538 7passwordA |
|
|
539 .br |
|
|
540 a*Cpassword9 |
|
|
541 .br |
|
|
542 a}password0Yz |
|
|
543 .br |
|
|
544 ... |
|
|
545 |
|
|
546 --no-char Override character usage |
|
|
547 .br |
|
|
548 This option tells splicex not to make |
|
|
549 .br |
|
|
550 any character additions to passwords. |
|
|
551 |
|
|
552 --char-length Start and end with set character lengths |
|
|
553 .br |
|
|
554 This option tells splicex to start and stop with a set |
|
|
555 .br |
|
|
556 amount of characters. IE: |
|
|
557 |
|
|
558 The following will start with one character added and |
|
|
559 .br |
|
|
560 end with 3: |
|
|
561 .br |
|
|
562 splicex --char-length='1, 3' |
|
|
563 |
|
|
564 The following will generate only 6 character passwords: |
|
|
565 .br |
|
|
566 splicex --exh-custom='MyCharacters.txt' --char-length='6, 6' |
|
|
567 |
|
|
568 .SH |
|
|
569 SOCIAL ENGINEERING |
|
|
570 |
|
|
571 --se-module Social Engineering Module: |
|
|
572 .br |
|
|
573 splicex is equipped with a social engineering module to create |
|
|
574 .br |
|
|
575 concatenated words from the selected dictionary. This module |
|
|
576 .br |
|
|
577 allows for "Module Stacking". IE, if you select other other |
|
|
578 .br |
|
|
579 modules when setting this flag then compiled words will also |
|
|
580 .br |
|
|
581 be incorporated into the algorithm as if they appeared on the |
|
|
582 .br |
|
|
583 the selected dictionary itself. |
|
|
584 |
|
|
585 .SH |
|
|
586 DESHADOW |
|
|
587 |
|
|
588 splicex comes with its own small program to compare a created hash |
|
|
589 .br |
|
|
590 sum, those found in /etc/shadow with an existing one given through |
|
|
591 .br |
|
|
592 user input. When using the deshadow option you will need to set |
|
|
593 .br |
|
|
594 exactly one of the --get-shadow or --set-shadow options. There is no |
|
|
595 .br |
|
|
596 need to use the --command or the --test flags when using this option |
|
|
597 .br |
|
|
598 because the values for each will be preset. |
|
|
599 |
|
|
600 --get-shadow Get the shadow info for a user |
|
|
601 .br |
|
|
602 see examples below for usage details. |
|
|
603 |
|
|
604 --set-shadow Use the shadow info from a file. This file should be |
|
|
605 .br |
|
|
606 in plain text and contain only one line with the |
|
|
607 .br |
|
|
608 following syntax: |
|
|
609 |
|
|
610 ============= NOT ACTUAL LINE ON FILE =============== |
|
|
611 .br |
|
|
612 $HashingMethod$SaltValue$ActualHashItself |
|
|
613 |
|
|
614 ============= NOT ACTUAL LINE ON FILE =============== |
|
|
615 |
|
|
616 If you need to see an example Shadow entry you may |
|
|
617 .br |
|
|
618 use the following command: |
|
|
619 |
|
|
620 cat /etc/shadow | grep -i "$USER" |
|
|
621 |
|
|
622 .SH |
|
|
623 EXHAUSTIVE |
|
|
624 |
|
|
625 splicex is capable of mounting a standard exhaustive attack. |
|
|
626 .br |
|
|
627 An exhaustive attack is a sure\-fire method to crack any |
|
|
628 .br |
|
|
629 password but this can also take large amounts of time |
|
|
630 .br |
|
|
631 depending on the length of a password. If it's necessary to |
|
|
632 .br |
|
|
633 use an exhaustive bruteforcing algorithm you may do so with |
|
|
634 .br |
|
|
635 one of the following options: |
|
|
636 |
|
|
637 --exh-l |
|
|
638 .br |
|
|
639 This attack uses only letters. |
|
|
640 |
|
|
641 --exh-n |
|
|
642 .br |
|
|
643 This attack uses only numbers. |
|
|
644 |
|
|
645 --exh-s |
|
|
646 .br |
|
|
647 This attack uses only special characters. |
|
|
648 |
|
|
649 --exh-ln |
|
|
650 .br |
|
|
651 This attack uses only letters and numbers. |
|
|
652 |
|
|
653 --exh-ls |
|
|
654 .br |
|
|
655 This attack uses only letters and special characters. |
|
|
656 |
|
|
657 --exh-ns |
|
|
658 .br |
|
|
659 This attack uses only numbers and special characters. |
|
|
660 |
|
|
661 --exh-all |
|
|
662 .br |
|
|
663 This attack uses all characters. |
|
|
664 |
|
|
665 --exh-custom |
|
|
666 .br |
|
|
667 This attack uses custom characters in a character list. IE: |
|
|
668 .br |
|
|
669 --exh-custom='CharList.txt' |
|
|
670 .br |
|
|
671 A character list should be in the following syntax: |
|
|
672 |
|
|
673 ============= NOT ACTUAL LINE ON FILE =============== |
|
|
674 .br |
|
|
675 j |
|
|
676 .br |
|
|
677 1 |
|
|
678 .br |
|
|
679 @ |
|
|
680 .br |
|
|
681 0 |
|
|
682 .br |
|
|
683 z |
|
|
684 .br |
|
|
685 ============= NOT ACTUAL LINE ON FILE =============== |
|
|
686 |
|
|
687 .SH |
|
|
688 STDOUT |
|
|
689 |
|
|
690 splicex has the option to skip the command and test flags |
|
|
691 .br |
|
|
692 and print only the created passwords to stdout. This is a |
|
|
693 .br |
|
|
694 useful flag if you're going to pipe the output to stdin |
|
|
695 .br |
|
|
696 on another program. |
|
|
697 |
|
|
698 --stdout |
|
|
699 .br |
|
|
700 The output will look similar to the following: |
|
|
701 .br |
|
|
702 password |
|
|
703 .br |
|
|
704 qwerty |
|
|
705 .br |
|
|
706 123magick |
|
|
707 .br |
|
|
708 newpass |
|
|
709 .br |
|
|
710 john1965 |
|
|
711 |
|
|
712 .SH |
|
|
713 REGEXP |
|
|
714 |
|
|
715 splicex can create some regexp type functions |
|
|
716 .br |
|
|
717 using existing options: |
|
|
718 |
|
|
719 splicex --command='echo onePASSWORDthree' --test='onetwothree' --exh-l |
|
|
720 |
|
|
721 splicex --command='echo johnPASSWORD65' --test='john1965' --exh-custom='MyList.txt' |
|
|
722 |
|
|
723 splicex --command='echo ilovePASSWORD' -R --no-char --test='iloveqwerty' |
|
|
724 |
|
|
725 you may also want to see --se-module for more specific attacks. |
|
|
726 |
|
|
727 .SH |
|
|
728 CONTROLS |
|
|
729 |
|
|
730 splicex contains some options worth going over again. |
|
|
731 |
|
|
732 --command='<insert command> PASSWORD' #must contain regexp 'PASSWORD' |
|
|
733 |
|
|
734 --time='10, 1' #timed iterations |
|
|
735 |
|
|
736 --custom='file.txt', -U 'file.txt', --dictionary='file.txt', |
|
|
737 .br |
|
|
738 --exh-custom='file.txt' #custom wordlists and/or character lists |
|
|
739 |
|
|
740 --no-char #useful flag to only use the generated wordlist |
|
|
741 .br |
|
|
742 #no characters will be appended to the passwords |
|
|
743 |
|
|
744 --stdout #prints only passwords |
|
|
745 |
|
|
746 --debug #helps to troubleshoot |
|
|
747 |
|
|
748 .SH |
|
|
749 EXAMPLES |
|
|
750 |
|
|
751 splicex --command="unrar -pPASSWORD t file.rar" --test="All OK" -R |
|
|
752 |
|
|
753 splicex --command="sshpass -pPASSWORD ssh user@host" --dictionary="wordlist" -L |
|
|
754 |
|
|
755 splicex --command="smbclient -L 192.168.1.0 -Uusername%PASSWORD" -L |
|
|
756 |
|
|
757 splicex --deshadow --get-shadow="root" -R |
|
|
758 |
|
|
759 splicex --deshadow --set-shadow="/home/user/shadow.txt" -R |
|
|
760 |
|
|
761 splicex\\ |
|
|
762 .br |
|
|
763 --command="echo PASSWORD | aircrack-ng -b 00:11:22:33:44:55 -w - *.cap"\\ |
|
|
764 .br |
|
|
765 --wep-5 --wep-13 --no-char --dictionary='MyWords.txt'\\ |
|
|
766 .br |
|
|
767 --test='KEY FOUND' |
|
|
768 |
|
|
769 splicex --command='curl --user <user[:PASSWORD]> https://www.example.com' -R |
|
|
770 |
