|
688
|
1 .TH SpliceX "" "" "" "" |
|
|
2 __________ _ _ __ __ ______ |
|
|
3 / / / / ___| _ __ | (_) ___ ___\\ \\/ / / / / / |
|
|
4 / / / /\\___ \\| '_ \\| | |/ __/ _ \\\\ / / / / / |
|
|
5 / / / / ___) | |_) | | | (_| __// \\ / / / / |
|
|
6 /_/_/_/ |____/| .__/|_|_|\\___\\___/_/\\_\\/_/_/_/ |
|
|
7 |_| |
|
|
8 |
|
|
9 .:Brute Force Utilities For GNU/Linux:. |
|
|
10 |
|
|
11 .SH |
|
|
12 OPTIONS |
|
|
13 |
|
|
14 --help Show help display and exit |
|
|
15 |
|
|
16 --command Parse passwords to this command |
|
695
|
17 splicex --command='<command> PASSWORD' |
|
688
|
18 |
|
|
19 --dictionary Path to custom dictionary(wordlist) |
|
695
|
20 splicex --dictionary='WordList.txt' |
|
688
|
21 |
|
|
22 --rtfm Show manual page and exit |
|
|
23 |
|
|
24 --restore Path to restore file |
|
695
|
25 splicex --restore='splicex.save' |
|
688
|
26 |
|
|
27 --save Directory path to create save file |
|
695
|
28 splicex --save=/home/$USER/ |
|
688
|
29 |
|
|
30 --test Test output of command |
|
695
|
31 splicex --test='Password Ok' |
|
688
|
32 |
|
|
33 --time Manipulate timed iterations |
|
695
|
34 splicex --time='12, 3' |
|
688
|
35 |
|
|
36 --usernames Path to username list |
|
695
|
37 splicex --usernames='UserList.txt' |
|
688
|
38 |
|
|
39 --exh-l Use an exhaustive attack with letters only |
|
|
40 |
|
|
41 --exh-n Use an exhaustive attack with numbers only |
|
|
42 |
|
|
43 --exh-s Use an exhaustive attack with special characters only |
|
|
44 |
|
|
45 --exh-ln Use an exhaustive attack with letters and numbers only |
|
|
46 |
|
|
47 --exh-ls Use an exhaustive attack with letters and special |
|
|
48 characters only |
|
|
49 |
|
|
50 --exh-ns Use an exhaustive attack with numbers and special |
|
|
51 characters only |
|
|
52 |
|
|
53 --exh-all Use an exhaustive attack with all characters |
|
|
54 |
|
|
55 --exh-custom Use an exhaustive attack with custom characters |
|
695
|
56 splicex --exh-custom='CharsList.txt' |
|
688
|
57 |
|
|
58 --stdout Print only passwords to stdout |
|
|
59 |
|
|
60 -A Use alphabetical mixing module |
|
|
61 |
|
|
62 -B Use backwords module |
|
|
63 |
|
|
64 -C Use alternating caps module |
|
|
65 |
|
|
66 -L Use "L337" speak module |
|
|
67 |
|
|
68 -M Use MD5 module |
|
|
69 |
|
|
70 -N Use numerical mixing module |
|
|
71 |
|
|
72 -R Use regular words module |
|
|
73 |
|
|
74 -S Use special mixing module |
|
|
75 |
|
|
76 --mix-custom Use custom mixing module |
|
695
|
77 splicex --mix-custom='CharsList.txt' |
|
688
|
78 |
|
|
79 --wep-5 Use 5 character WEP module |
|
|
80 |
|
|
81 --wep-13 Use 13 character WEP module |
|
|
82 |
|
|
83 --wep-* Use 5 and 13 character WEP module |
|
|
84 |
|
|
85 --letters Use letter characters |
|
|
86 |
|
|
87 --numbers Use number characters |
|
|
88 |
|
|
89 --specials Use special characters |
|
|
90 |
|
|
91 --char-all Use all characters |
|
|
92 |
|
|
93 --no-char Override character usage |
|
|
94 |
|
|
95 --char-length Start and end with set character lengths |
|
|
96 |
|
|
97 --custom Use custom characters |
|
695
|
98 splicex --custom='CharsList.txt' |
|
688
|
99 |
|
|
100 --deshadow Crack shadow hash sums |
|
|
101 |
|
|
102 --get-shadow Get the shadow info for a user |
|
695
|
103 splicex --get-shadow=$USER |
|
688
|
104 |
|
|
105 --set-shadow Use the shadow info from a file |
|
695
|
106 splicex --set-shadow='UserShadow.txt' |
|
688
|
107 |
|
|
108 --se-module Use the social engineering module |
|
|
109 |
|
|
110 --create Create a dictionary |
|
|
111 |
|
|
112 --debug Enable debugging |
|
|
113 |
|
|
114 .SH |
|
|
115 DICTIONARIES |
|
|
116 |
|
|
117 splicex comes equipped with its own dictionary but is |
|
|
118 .br |
|
|
119 designed to use custom dictionaries as well. The |
|
|
120 .br |
|
|
121 dictionary should be in the following format: a plain |
|
|
122 .br |
|
|
123 text file with one word per line, no spaces between |
|
|
124 .br |
|
|
125 words, letters only. You do not have to follow the |
|
|
126 .br |
|
|
127 above guideline exactly but it is strongly suggested. |
|
|
128 .br |
|
|
129 IE: |
|
|
130 |
|
|
131 ============= NOT ACTUAL LINE ON FILE =============== |
|
|
132 .br |
|
|
133 qwerty |
|
|
134 .br |
|
|
135 john |
|
|
136 .br |
|
|
137 linux |
|
|
138 .br |
|
|
139 newpass |
|
|
140 .br |
|
|
141 princess |
|
|
142 .br |
|
|
143 hacker |
|
|
144 .br |
|
|
145 ============= NOT ACTUAL LINE ON FILE =============== |
|
|
146 |
|
|
147 .SH |
|
|
148 USERNAMES |
|
|
149 |
|
|
150 splicex is capable of cycling through usernames as it |
|
|
151 .br |
|
|
152 would a dictionary. There is no default username list |
|
|
153 .br |
|
|
154 on splicex. The username list should be in the |
|
|
155 .br |
|
|
156 following format: a plain text file with one word per |
|
|
157 .br |
|
|
158 line, no spaces between words, letters only. You do |
|
|
159 .br |
|
|
160 not have to follow the above guideline exactly but it |
|
|
161 .br |
|
|
162 is strongly suggested. |
|
|
163 .br |
|
|
164 IE: |
|
|
165 |
|
|
166 ============= NOT ACTUAL LINE ON FILE =============== |
|
|
167 .br |
|
|
168 john |
|
|
169 .br |
|
|
170 admin |
|
|
171 .br |
|
|
172 root |
|
|
173 .br |
|
|
174 david |
|
|
175 .br |
|
|
176 fred |
|
|
177 .br |
|
|
178 ============= NOT ACTUAL LINE ON FILE =============== |
|
|
179 |
|
|
180 .SH |
|
|
181 SAVING AND RESTORING |
|
|
182 |
|
|
183 splicex is capable of restarting where it was stopped |
|
|
184 .br |
|
|
185 by using the --restore switch followed by the full path to |
|
|
186 .br |
|
|
187 a splicex.save file. DO NOT modify these files or |
|
|
188 .br |
|
|
189 splicex may receive an error or not load at all. |
|
|
190 .br |
|
|
191 When restoring, if you set the --test switch you must |
|
|
192 .br |
|
|
193 manually set it again or splicex will not test for |
|
|
194 .br |
|
|
195 specified output. If saving splicex's status, then |
|
|
196 .br |
|
|
197 splicex will save to the specified directory as |
|
|
198 .br |
|
|
199 splicex.save. If splicex.save already exists it will |
|
|
200 .br |
|
|
201 be overwritten so change the name of any original |
|
|
202 .br |
|
|
203 copies if you want to keep them. If saving a splicex |
|
|
204 .br |
|
|
205 session you should stop the process using the |
|
|
206 .br |
|
|
207 appropriate terminal feature before killing splicex |
|
|
208 .br |
|
|
209 to avoid corrupting the save file. |
|
|
210 |
|
|
211 --save="/path/to/save/directory/" |
|
|
212 |
|
|
213 --restore="/path/to/splicex.save/" |
|
|
214 .SH |
|
|
215 MODULES |
|
|
216 |
|
|
217 -A -B -C -L -M -N -R -S --mix-custom --wep-5 --wep-13 --wep-* --se-module |
|
|
218 .br |
|
|
219 splicex comes equipped with several modules that mangle |
|
|
220 .br |
|
|
221 the words in the selected dictionary to create probable |
|
|
222 .br |
|
|
223 password combinations. You may use as many of these |
|
|
224 .br |
|
|
225 modules as you want. Some modules can take a few or more |
|
|
226 .br |
|
|
227 minutes to enhance a dictionary depending on the size |
|
|
228 .br |
|
|
229 of the selected dictionary. |
|
|
230 |
|
|
231 -A Alphabetical Mixing Module: |
|
|
232 .br |
|
|
233 This module puts several combinations of alphabet |
|
|
234 .br |
|
|
235 characters inside the words in the selected |
|
|
236 .br |
|
|
237 dictionary. IE: |
|
|
238 |
|
|
239 pZassword |
|
|
240 .br |
|
|
241 pCatssword |
|
|
242 .br |
|
|
243 passworKd |
|
|
244 .br |
|
|
245 passwoJrLd |
|
|
246 .br |
|
|
247 ... |
|
|
248 |
|
|
249 -B Backwards Module: |
|
|
250 .br |
|
|
251 This module creates backwards words from the |
|
|
252 .br |
|
|
253 selected dictionary. IE: |
|
|
254 |
|
|
255 drowssap |
|
|
256 .br |
|
|
257 ... |
|
|
258 |
|
|
259 -C Capitalization Module: |
|
|
260 .br |
|
|
261 This module recreates the words in the selected |
|
|
262 .br |
|
|
263 dictionary with alternating capitalizations. |
|
|
264 .br |
|
|
265 IE: |
|
|
266 |
|
|
267 Password |
|
|
268 .br |
|
|
269 PAssword |
|
|
270 .br |
|
|
271 PaSsWoRd |
|
|
272 .br |
|
|
273 pAsSwOrD |
|
|
274 .br |
|
|
275 passwoRD |
|
|
276 .br |
|
|
277 ... |
|
|
278 |
|
|
279 -L L337 Speak Module: |
|
|
280 .br |
|
|
281 This module converts the words in the selected |
|
|
282 .br |
|
|
283 dictionary to several versions of "l337 speak". |
|
|
284 .br |
|
|
285 IE: |
|
|
286 |
|
|
287 p4ssword |
|
|
288 .br |
|
|
289 p455w0rd |
|
|
290 .br |
|
|
291 pa5sword |
|
|
292 .br |
|
|
293 ps@$$word |
|
|
294 .br |
|
|
295 ... |
|
|
296 |
|
|
297 -N Numerical Mixing Module: |
|
|
298 .br |
|
|
299 This module puts several combinations of number |
|
|
300 .br |
|
|
301 characters inside the words in the selected |
|
|
302 .br |
|
|
303 dictionary. IE: |
|
|
304 |
|
|
305 p2assword |
|
|
306 .br |
|
|
307 p5a8ssword |
|
|
308 .br |
|
|
309 passwor0d |
|
|
310 .br |
|
|
311 passwo6r9d |
|
|
312 .br |
|
|
313 ... |
|
|
314 |
|
|
315 -R Regular Words Module: |
|
|
316 .br |
|
|
317 This module tells splicex to use the words in a |
|
|
318 .br |
|
|
319 selected dictionary as they are listed. |
|
|
320 |
|
|
321 |
|
|
322 -S Special Mixing Module: |
|
|
323 .br |
|
|
324 This module puts several combinations of special |
|
|
325 .br |
|
|
326 characters inside the words in the selected |
|
|
327 .br |
|
|
328 dictionary. IE: |
|
|
329 |
|
|
330 p!assword |
|
|
331 .br |
|
|
332 p@a$ssword |
|
|
333 .br |
|
|
334 passwor(d |
|
|
335 .br |
|
|
336 passwo-r+d |
|
|
337 .br |
|
|
338 ... |
|
|
339 |
|
|
340 --mix-custom Custom Mixing Module: |
|
|
341 .br |
|
|
342 This module puts several combinations of user |
|
|
343 .br |
|
|
344 selected characters inside the words from the |
|
|
345 .br |
|
|
346 selected character list. IE: |
|
|
347 |
|
|
348 p!assword |
|
|
349 .br |
|
|
350 p@a$ssword |
|
|
351 .br |
|
|
352 passwor(d |
|
|
353 .br |
|
|
354 passwo-r+d |
|
|
355 .br |
|
|
356 ... |
|
|
357 |
|
|
358 --mix-custom's list should only contain one character per |
|
|
359 .br |
|
|
360 line on a plain text file. If you select this |
|
|
361 .br |
|
|
362 module then modules -A, -N, -S will be ignored. |
|
|
363 .br |
|
|
364 IE: |
|
|
365 |
|
|
366 ============= NOT ACTUAL LINE ON FILE =============== |
|
|
367 .br |
|
|
368 j |
|
|
369 .br |
|
|
370 1 |
|
|
371 .br |
|
|
372 @ |
|
|
373 .br |
|
|
374 0 |
|
|
375 .br |
|
|
376 z |
|
|
377 .br |
|
|
378 ============= NOT ACTUAL LINE ON FILE =============== |
|
|
379 |
|
|
380 If -A, -N, and/or -S options are selected then |
|
|
381 .br |
|
|
382 the modules will be combined. see also --char-all. IE: |
|
|
383 |
|
|
384 pZa!ssword |
|
|
385 .br |
|
|
386 p0atssword |
|
|
387 .br |
|
|
388 passwor7d |
|
|
389 .br |
|
|
390 passwo*rLd |
|
|
391 .br |
|
|
392 ... |
|
|
393 |
|
|
394 -M MD5 Module: |
|
|
395 .br |
|
|
396 This module generates md5 hash sums for |
|
|
397 .br |
|
|
398 words listed in the selected dictionary. |
|
|
399 .br |
|
|
400 IE: |
|
|
401 |
|
|
402 5912d7bfd10f631f1715bf85bbb72d97 |
|
|
403 .br |
|
|
404 966e8fda594333563c02fa4b69765a5e |
|
|
405 .br |
|
|
406 900bc885d7553375aec470198a9514f3 |
|
|
407 .br |
|
|
408 97f014516561ef487ec368d6158eb3f4 |
|
|
409 .br |
|
|
410 ... |
|
|
411 |
|
|
412 |
|
|
413 --wep-*, --wep-5, --wep-13 WEP Modules: |
|
|
414 .br |
|
|
415 these two modules strip 5 or 13 character |
|
|
416 .br |
|
|
417 words from the selected dictionary and produce |
|
|
418 .br |
|
|
419 WEP compatible hex passwords. If your dictionary |
|
|
420 .br |
|
|
421 does not contain 5 or 13 character words then |
|
|
422 .br |
|
|
423 splicex will likely give an error. |
|
|
424 |
|
|
425 |
|
|
426 --se-module Social Engineering Module: |
|
|
427 .br |
|
|
428 see the social engineering section below for |
|
|
429 .br |
|
|
430 details. |
|
|
431 |
|
|
432 .SH |
|
|
433 CHARACTERS |
|
|
434 |
|
|
435 splicex appends alternating character tags to the beginning |
|
|
436 .br |
|
|
437 and/or ending of each password. By default splicex will use |
|
|
438 .br |
|
|
439 all standard keyboard characters but you can choose to use |
|
|
440 .br |
|
|
441 specific combinations. If one or more of the following |
|
|
442 .br |
|
|
443 options is omitted then only the selected options will be |
|
|
444 .br |
|
|
445 used ; they will be combined. |
|
|
446 |
|
|
447 --letters Use letter characters |
|
|
448 .br |
|
|
449 Apassword |
|
|
450 .br |
|
|
451 passwordA |
|
|
452 .br |
|
|
453 abCpassword |
|
|
454 .br |
|
|
455 passwordxYz |
|
|
456 .br |
|
|
457 ... |
|
|
458 |
|
|
459 --numbers Use numbers characters |
|
|
460 .br |
|
|
461 1password |
|
|
462 .br |
|
|
463 password1 |
|
|
464 .br |
|
|
465 123password |
|
|
466 .br |
|
|
467 password098 |
|
|
468 .br |
|
|
469 ... |
|
|
470 |
|
|
471 --specials Use specials characters |
|
|
472 .br |
|
|
473 $password |
|
|
474 .br |
|
|
475 password^ |
|
|
476 .br |
|
|
477 %)!password |
|
|
478 .br |
|
|
479 password#*@ |
|
|
480 .br |
|
|
481 ... |
|
|
482 |
|
|
483 --custom Use custom characters from a list |
|
|
484 .br |
|
|
485 $password |
|
|
486 .br |
|
|
487 password^ |
|
|
488 .br |
|
|
489 %)!password |
|
|
490 .br |
|
|
491 password#*@ |
|
|
492 .br |
|
|
493 ... |
|
|
494 |
|
|
495 --custom list should only contain one character per |
|
|
496 .br |
|
|
497 line on a plain text file. If you select this |
|
|
498 .br |
|
|
499 module then other character flags will be ignored. |
|
|
500 .br |
|
|
501 If the custom list matches the selected dictionary |
|
|
502 .br |
|
|
503 then splicex will run in exhaustive mode. |
|
|
504 .br |
|
|
505 IE: |
|
|
506 |
|
|
507 ============= NOT ACTUAL LINE ON FILE =============== |
|
|
508 .br |
|
|
509 j |
|
|
510 .br |
|
|
511 1 |
|
|
512 .br |
|
|
513 @ |
|
|
514 .br |
|
|
515 0 |
|
|
516 .br |
|
|
517 z |
|
|
518 .br |
|
|
519 ============= NOT ACTUAL LINE ON FILE =============== |
|
|
520 |
|
|
521 --letters, --numbers, and/or --specials |
|
|
522 .br |
|
|
523 Apassword6& |
|
|
524 .br |
|
|
525 7passwordA |
|
|
526 .br |
|
|
527 a*Cpassword9 |
|
|
528 .br |
|
|
529 a}password0Yz |
|
|
530 .br |
|
|
531 ... |
|
|
532 |
|
|
533 --no-char Override character usage |
|
|
534 .br |
|
|
535 This option tells splicex not to make |
|
|
536 .br |
|
|
537 any character additions to passwords. |
|
|
538 |
|
|
539 --char-length Start and end with set character lengths |
|
|
540 .br |
|
|
541 This option tells splicex to start and stop with a set |
|
|
542 .br |
|
|
543 amount of characters. IE: |
|
|
544 |
|
|
545 The following will start with one character added and |
|
|
546 .br |
|
|
547 end with 3: |
|
|
548 .br |
|
|
549 splicex --char-length='1, 3' |
|
|
550 |
|
|
551 The following will generate only 6 character passwords: |
|
|
552 .br |
|
|
553 splicex --exh-custom='MyCharacters.txt' --char-length='6, 6' |
|
|
554 |
|
|
555 .SH |
|
|
556 SOCIAL ENGINEERING |
|
|
557 |
|
|
558 --se-module Social Engineering Module: |
|
|
559 .br |
|
|
560 splicex is equipped with a social engineering module to create |
|
|
561 .br |
|
|
562 concatenated words from the selected dictionary. This module |
|
|
563 .br |
|
|
564 allows for "Module Stacking". IE, if you select other other |
|
|
565 .br |
|
|
566 modules when setting this flag then compiled words will also |
|
|
567 .br |
|
|
568 be incorporated into the algorithm as if they appeared on the |
|
|
569 .br |
|
|
570 the selected dictionary itself. |
|
|
571 |
|
|
572 .SH |
|
|
573 DESHADOW |
|
|
574 |
|
|
575 splicex comes with its own small program to compare a created hash |
|
|
576 .br |
|
|
577 sum, those found in /etc/shadow with an existing one given through |
|
|
578 .br |
|
|
579 user input. When using the deshadow option you will need to set |
|
|
580 .br |
|
|
581 exactly one of the --get-shadow or --set-shadow options. There is no |
|
|
582 .br |
|
|
583 need to use the --command or the --test flags when using this option |
|
|
584 .br |
|
|
585 because the values for each will be preset. |
|
|
586 |
|
|
587 --get-shadow Get the shadow info for a user |
|
|
588 .br |
|
|
589 see examples below for usage details. |
|
|
590 |
|
|
591 --set-shadow Use the shadow info from a file. This file should be |
|
|
592 .br |
|
|
593 in plain text and contain only one line with the |
|
|
594 .br |
|
|
595 following syntax: |
|
|
596 |
|
|
597 ============= NOT ACTUAL LINE ON FILE =============== |
|
|
598 .br |
|
|
599 $HashingMethod$SaltValue$ActualHashItself |
|
|
600 |
|
|
601 ============= NOT ACTUAL LINE ON FILE =============== |
|
|
602 |
|
|
603 If you need to see an example Shadow entry you may |
|
|
604 .br |
|
|
605 use the following command: |
|
|
606 |
|
|
607 cat /etc/shadow | grep -i "$USER" |
|
|
608 |
|
|
609 .SH |
|
|
610 EXHAUSTIVE |
|
|
611 |
|
|
612 splicex is capable of mounting a standard exhaustive attack. |
|
|
613 .br |
|
|
614 An exhaustive attack is a sure\-fire method to crack any |
|
|
615 .br |
|
|
616 password but this can also take large amounts of time |
|
|
617 .br |
|
|
618 depending on the length of a password. If it's necessary to |
|
|
619 .br |
|
|
620 use an exhaustive bruteforcing algorithm you may do so with |
|
|
621 .br |
|
|
622 one of the following options: |
|
|
623 |
|
|
624 --exh-l |
|
|
625 .br |
|
|
626 This attack uses only letters. |
|
|
627 |
|
|
628 --exh-n |
|
|
629 .br |
|
|
630 This attack uses only numbers. |
|
|
631 |
|
|
632 --exh-s |
|
|
633 .br |
|
|
634 This attack uses only special characters. |
|
|
635 |
|
|
636 --exh-ln |
|
|
637 .br |
|
|
638 This attack uses only letters and numbers. |
|
|
639 |
|
|
640 --exh-ls |
|
|
641 .br |
|
|
642 This attack uses only letters and special characters. |
|
|
643 |
|
|
644 --exh-ns |
|
|
645 .br |
|
|
646 This attack uses only numbers and special characters. |
|
|
647 |
|
|
648 --exh-all |
|
|
649 .br |
|
|
650 This attack uses all characters. |
|
|
651 |
|
|
652 --exh-custom |
|
|
653 .br |
|
|
654 This attack uses custom characters in a character list. IE: |
|
|
655 .br |
|
|
656 --exh-custom='CharList.txt' |
|
|
657 .br |
|
|
658 A character list should be in the following syntax: |
|
|
659 |
|
|
660 ============= NOT ACTUAL LINE ON FILE =============== |
|
|
661 .br |
|
|
662 j |
|
|
663 .br |
|
|
664 1 |
|
|
665 .br |
|
|
666 @ |
|
|
667 .br |
|
|
668 0 |
|
|
669 .br |
|
|
670 z |
|
|
671 .br |
|
|
672 ============= NOT ACTUAL LINE ON FILE =============== |
|
|
673 |
|
|
674 .SH |
|
|
675 STDOUT |
|
|
676 |
|
|
677 splicex has the option to skip the command and test flags |
|
|
678 .br |
|
|
679 and print only the created passwords to stdout. This is a |
|
|
680 .br |
|
|
681 useful flag if you're going to pipe the output to stdin |
|
|
682 .br |
|
|
683 on another program. |
|
|
684 |
|
|
685 --stdout |
|
|
686 .br |
|
|
687 The output will look similar to the following: |
|
|
688 .br |
|
|
689 password |
|
|
690 .br |
|
|
691 qwerty |
|
|
692 .br |
|
|
693 123magick |
|
|
694 .br |
|
|
695 newpass |
|
|
696 .br |
|
|
697 john1965 |
|
|
698 |
|
|
699 .SH |
|
|
700 REGEXP |
|
|
701 |
|
|
702 splicex can create some regexp type functions |
|
|
703 .br |
|
|
704 using existing options: |
|
|
705 |
|
|
706 splicex --command='echo onePASSWORDthree' --test='onetwothree' --exh-l |
|
|
707 |
|
|
708 splicex --command='echo johnPASSWORD65' --test='john1965' --exh-custom='MyList.txt' |
|
|
709 |
|
|
710 splicex --command='echo ilovePASSWORD' -R --no-char --test='iloveqwerty' |
|
|
711 |
|
|
712 you may also want to see --se-module for more specific attacks. |
|
|
713 |
|
|
714 .SH |
|
|
715 CONTROLS |
|
|
716 |
|
|
717 splicex contains some options worth going over again. |
|
|
718 |
|
|
719 --command='<insert command> PASSWORD' #must contain regexp 'PASSWORD' |
|
|
720 |
|
|
721 --time='10, 1' #timed iterations |
|
|
722 |
|
|
723 --custom='file.txt', -U 'file.txt', --dictionary='file.txt', |
|
|
724 .br |
|
|
725 --exh-custom='file.txt' #custom wordlists and/or character lists |
|
|
726 |
|
|
727 --no-char #useful flag to only use the generated wordlist |
|
|
728 .br |
|
|
729 #no characters will be appended to the passwords |
|
|
730 |
|
|
731 --stdout #prints only passwords |
|
|
732 |
|
|
733 --debug #helps to troubleshoot |
|
|
734 |
|
|
735 .SH |
|
|
736 EXAMPLES |
|
|
737 |
|
|
738 splicex --command="unrar -pPASSWORD t file.rar" --test="All OK" -R |
|
|
739 |
|
|
740 splicex --command="sshpass -pPASSWORD ssh user@host" --dictionary="wordlist" -L |
|
|
741 |
|
|
742 splicex --command="smbclient -L 192.168.1.0 -Uusername%PASSWORD" -L |
|
|
743 |
|
|
744 splicex --deshadow --get-shadow="root" -R |
|
|
745 |
|
|
746 splicex --deshadow --set-shadow="/home/user/shadow.txt" -R |
|
|
747 |
|
|
748 splicex\\ |
|
|
749 .br |
|
|
750 --command="echo PASSWORD | aircrack-ng -b 00:11:22:33:44:55 -w - *.cap"\\ |
|
|
751 .br |
|
|
752 --wep-5 --wep-13 --no-char --dictionary='MyWords.txt'\\ |
|
|
753 .br |
|
|
754 --test='KEY FOUND' |
|
|
755 |
|
|
756 splicex --command='curl --user <user[:PASSWORD]> https://www.example.com' -R |
|
|
757 |
