8 digit Numeric List: 99999999 to 00000000

Discussion in 'Dictionary, Password & Wordlists' started by Crackerz Wave, 27 Oct 2012.

  1. 6hzzz

    6hzzz Well-Known Member

    Joined:
    19 Feb 2013
    Messages:
    8
    Likes Received:
    1
    THX!:dance
     
  2. vampiricbunny1800

    vampiricbunny1800 Well-Known Member
    Dev Team VIP

    Joined:
    8 Oct 2012
    Messages:
    242
    Likes Received:
    80
    ya its why i dont have a 10 digit i have every password list on this site and my own and every number from 00000000 - 999999999 and that is about 40 gigs if you put 10 digit in there its 160 gigs ><;

    if you want i can upload my personal password file it has a little over 22 milion words or some junk and lots of number + mix but its HUGE at 40 some gigs
     
    • Like Like x 1
  3. reyman76

    reyman76 Well-Known Member
    VIP

    Joined:
    29 Jan 2013
    Messages:
    257
    Likes Received:
    37
    how about pws list 1111111111 to 2222222222 ???? what size this bro???:joy
     
  4. estimacamry

    estimacamry Tracker
    VIP

    Joined:
    3 Aug 2012
    Messages:
    556
    Likes Received:
    169
    11GB
     
  5. reyman76

    reyman76 Well-Known Member
    VIP

    Joined:
    29 Jan 2013
    Messages:
    257
    Likes Received:
    37
    what sofware i must use if i want to create pws list like that bro???:wideyed:
     
  6. vampiricbunny1800

    vampiricbunny1800 Well-Known Member
    Dev Team VIP

    Joined:
    8 Oct 2012
    Messages:
    242
    Likes Received:
    80
    you can do it in just back track or you can use a password generator
    http://textmechanic.com/Generate-List-of-Numbers.html this one is ok its much faster to just use crunch or hascat though trust me i tested it MANY times u get 100-400 pmk's with a password list even if you pre hash the list (that can take weeks fyi and is only good for 1 name) it takes about 2 hrs (but 2 weeks and 2 hrs do to hash) however crunch can do that list on the spot like this >

    /pentest/passwords/crunch/./crunch 10 10 0123456789 -u | pyrit -i- -r <cap file> -e <ESSID> attack_passthrough

    that will pipe the info though pyrit and get you about 4000 pmk's (ie that list will be done in no time and hit every number from 0000000000 to 9999999999 )

    or use hashcat and it is even faster ( my hash cat is not working so i cant help right now )
    --- Double Post Merged, 12 Mar 2013 ---
    credit to > estimacamry
     
    • Like Like x 1
  7. phyo thant

    phyo thant Member

    Joined:
    15 Mar 2013
    Messages:
    2
    Likes Received:
    0
    you can highly compressed that 10 digit wordlist with rar bro
    hehe
    can you do that for us bro???
    or
    you can give an easy program to write that list ???
    Respect !!!!!
    :p
     
  8. Crackerz Wave

    Crackerz Wave The Dictator

    Joined:
    20 May 2012
    Messages:
    649
    Likes Received:
    136
    let me find the generator app..forgot where i put it
     
    • Like Like x 1
  9. phyo thant

    phyo thant Member

    Joined:
    15 Mar 2013
    Messages:
    2
    Likes Received:
    0
    great bro
    I will be here
    so so thanks
    ;)
     
  10. Crackerz Wave

    Crackerz Wave The Dictator

    Joined:
    20 May 2012
    Messages:
    649
    Likes Received:
    136
    • Like Like x 1
  11. levent

    levent Member

    Joined:
    14 Mar 2013
    Messages:
    7
    Likes Received:
    0
  12. Gordon

    Gordon Member

    Joined:
    20 Mar 2013
    Messages:
    26
    Likes Received:
    6
    Hey - great work.

    In my area one of the major ISP uses a 10 digit numeric WPA passphrase
    Last 2 cracked with reaver are "PSK 1420963193 and PSK 7218854021"

    If you store your "wordlist" on your USB drive (assuming you boot from a USB drive) you use the following process to hack WPA

    1. Boot XiaoPan
    2. Plug in USB network card
    3. use Feeding Bottle or MiniDWEP to find a network with good signal strength / clients attached and WPA security.
    4. When program asks for a dictionary point to the one on your USB drive.

    If your dictionary is on a different drive than your boot drive you may need to use the mount tool so you can browse that drive.
    Both MiniDWEP and Feeding Bottle show you where the captured packet with the "4 way handshake " is stored.
    You can use aircrack to find the password in your dictionary any time on this saved "capture packet"

    regarding rainbow tables . . .
    these need to be generated new FOR EVERY ESSID so you can't make a general rainbow table.

    Many access points are vulnerable wo a WPS attack with Reaver,
    and if you are new to this (as I expect) then you start out with inflator
    it will help you find unlocked APs and set up your reaver command line.
     
  13. vampiricbunny1800

    vampiricbunny1800 Well-Known Member
    Dev Team VIP

    Joined:
    8 Oct 2012
    Messages:
    242
    Likes Received:
    80
    password files are not the way to go its to slow
     
  14. ImJoJo

    ImJoJo The One & Only
    VIP

    Joined:
    25 Jun 2012
    Messages:
    257
    Likes Received:
    122
    I disagree, recent tests by me have proved to be faster than reaver. 20 seconds :eek: Now it can be slow if you dont know a thing about the target.

    Sent from my LG-MS770 using Tapatalk 2
     
  15. Fantastic

    Fantastic Well-Known Member
    VIP

    Joined:
    19 Feb 2013
    Messages:
    122
    Likes Received:
    158
    Hello ImJoJo , how did you manage to crack the network within 20 seconds by knowing some information about the target?
     
  16. vampiricbunny1800

    vampiricbunny1800 Well-Known Member
    Dev Team VIP

    Joined:
    8 Oct 2012
    Messages:
    242
    Likes Received:
    80
    id use the same thing only use crunch =) 255pmk vs 5000 pmk hmmmm 5000 yes pls thank you crunch / pyrit
     
  17. ImJoJo

    ImJoJo The One & Only
    VIP

    Joined:
    25 Jun 2012
    Messages:
    257
    Likes Received:
    122
    Read this tutorial....When used with mdk3 it can be a powerful combination,,Why? mdk3 has a feature that when executed it will reset the AP to default mode...one example I show in that tutorial shows that the ESSID shows most of the KEY/Passphrase. SBG6580 (router model number) and 0C last two characters of the WAN MAC address..I simply have to crack the rest of the second half of the WAN's MAC address which is 4 characters..create my own wordlist and within seconds or a few minutes I have the KEY...faster than trying pin after pin..now Im not saying its the best option..ONLY for certain AP's
    https://xiaopan.co/forums/threads/crack-wpa2-know-your-target.2030/
    --- Double Post Merged, 30 Mar 2013 ---
    I use the same tools..Reaver is not always successful, Belkin router have this thing that it will let you try pin after pin and right when you get to 91.90% it will not try any more pins..
     
  18. John Chin

    John Chin Active Member

    Joined:
    28 Apr 2013
    Messages:
    2
    Likes Received:
    0
    Happy to use Thanks:) ;)
     
  19. jumperQQ

    jumperQQ Member

    Joined:
    15 Nov 2013
    Messages:
    2
    Likes Received:
    0
    how do i open the list?
    --- Double Post Merged, 15 Nov 2013 ---
    i want to break the word list to smaller size
     
    #39 jumperQQ, 15 Nov 2013
    Last edited: 15 Nov 2013
  20. estimacamry

    estimacamry Tracker
    VIP

    Joined:
    3 Aug 2012
    Messages:
    556
    Likes Received:
    169

Share This Page

Loading...