Create tailored password lists from webpages using AI/NLP
Project description
[
Fuzzler
Fuzzler is a penetration testing tool that generates tailored password lists from webpages using Artificial Intelligence/Natural Language Processing.
Video walkthrough can be found here
Fuzzler executes the following three steps to create wordlists:
- Fuzzler crawls the given webpage using CeWL to identify words relevant to that business or organization.
- Fuzzler utilizes Natural Language Processing to find synonyms of the words collected in step 1 and then adds them to the wordlist.
- Fuzzler uses hashcat to fuzz the wordlist by transforming the words (lowercase, uppercase, capitalized, all capitalized except the first letter, reversed, digits 0-99 prepended/appended, and translated to 1337 speak).
These operations allow Fuzzler to generate incredibly sophisticated wordlists that better represent the passwords used by employees and services of the business/organization than traditional wordlists.
Feel free to break Fuzzler and let me know how I can make it better!
usage
download Fuzzler:
git clone https://www.github.com/suffs811/fuzzler.git
use fuzzler to generate wordlist:
python3 fuzzler.py -t 10.10.10.10 -p 8080
the final password list will be in 'fuzzes.txt'
other Fuzzler tools
the Fuzzler Limited - Chrome Extension can be found here
credit and license
Copyright (c) 2023 suffs811
This project is licensed under the MIT License - see the LICENSE file for details.
Fuzzler has been tested on kali linux 2023.2
NOTE: Fuzzler is only intended to be used for personal, legal activities. DO NOT use Fuzzler for illegal hacking activities. I am not liable for any damages caused by the unlawful use of this tool by another person.
-+- Leave a comment in the Discussion if you have any questions! -+-
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Hashes for fuzzler_suffs811-1.0.0-py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | e4a2a73cc59b3c2024b0a7b3ed04c54a188f6659eca5c082ff3dd044b3d1dfb2 |
|
MD5 | 30f1ce2f67c25cbb12665e7fe7315859 |
|
BLAKE2b-256 | 0ffeaceb50c5fc7a015b0c0c8b6d2d392e5ab905c5e83f0993fca2019d9f95b9 |