zzzteph/weakpass

Weakpass collection of tools for bruteforce and hashcracking

Hi there 👋

My name is Ivan, or Steph. I do security trainings, researches, and, from time to time, some bughunting, pentests, and other security stuff.

⚡ Fun fact: I'm not a cat.

Contacts

Twitter: @w34kp455

Telegram: zzzteph

Discord: https://discord.gg/eEEWHPyEVp

LinkedIn: ivan iushkevich

Projects

• For any kind of bruteforce find wordlists ... https://weakpass.com

• Open-source elearning management system for information security https://appsec.study

• Bughunting and workflow automation https://shrewdeye.app

• Distributed password brute-force system Kraker - Kraker

Talks, presentations, conferences, etc.

Did talks at the next conferences: One-Conference, BlackHat, HackingConf, Grehack, Hacktivity, RIT++, Confidence, S4 Europe, TBA.

• One-conference, How to automate vulnerabilities searching process for fun and profit

• BlackHat Europe, AppsecStudy - open-source elearning management system for information security

• BlackHat Europe 2022, shrewdeye - low hanging OSINT and reconnaissance

• Hacktivity, Appsec404 workshop

• GreHack, Java in AppSec404

• BlackHat US, Kraker

• Hacktivity, Web Security for Interns Workshop

• RitFest

• SCADA and mobile in the IoT times

• CONFidence, Mobile antivirus security assessment

• Hacktivity, Wordlists from statistics to genetic

• https://www.blackhat.com/ldn-15/schedule/summit-17.html

CVE's (sic!)

• CVE-2018-4847
• CVE-2018-4844
• CVE-2017-9969
• CVE-2017-9969

weakpass's Issues

Bad character in site

Could I write it here? I don't know. This is just to help...

This file has a problem: https://weakpass.com/wordlist/1696

It use character # and the browser can't decode. If you use %23 URL code, it work. You need to use urlencode in the site with theses dificult characteres.

making allinone word-lists

hi
I had downloaded some of your word-lists and I have also my own lists.
what I want to do is to merge my list to yours and create a allinone list for myself.
please suggest me python program do you suggest me to use. I need this application to remove the duplicates

20 Digits Wordlist for AVM Router

Hey Teph,

i'll create a custom wordlist specific for AVM Fritzbox 7490 and newer, i had installed a lot of Fritzbox and i have never seen 3 same digits in a row and 6 or more same digits on all 20 digits.

i know how to create 20 digit Wordlist but how can i create a 20 digit wordlist without 3 same digits in a row and not more then 6 same digits of all 20 digits.

thx for help

Add crackable examples

Need to add crackable examples to crack-js

"##append Special chars" rule set not adding single characters.

Hey Ive been playing with this tool which I love btw, and I noticed the section where the rule set should add the special characters doesn't. For example, by default it should add $! $@ $# $$ as single char and it only adds them after adding multiple ones like $! $! Will add !!. Please let me know if there is a solution around this. Thanks!

How to use Weakpass_3 ?

Weakpass_3 is 28.2GB after decompression. Open it with UltraEdit to display hexadecimal, and use linux to display the file type data. How to transcode utf8?

all in one passwordlist

hi
does this password list
All-in-One
444,57 GB
57 GB
40247321168

include all the passwords in your website? or there are other unique passwords in other lists?