diff options
Diffstat (limited to 'contrib/splicex/src/manual')
| -rw-r--r-- | contrib/splicex/src/manual | 758 |
1 files changed, 758 insertions, 0 deletions
diff --git a/contrib/splicex/src/manual b/contrib/splicex/src/manual new file mode 100644 index 0000000..9ad0b66 --- /dev/null +++ b/contrib/splicex/src/manual @@ -0,0 +1,758 @@ +.TH SpliceX "" "" "" "" + __________ _ _ __ __ ______ + / / / / ___| _ __ | (_) ___ ___\\ \\/ / / / / / + / / / /\\___ \\| '_ \\| | |/ __/ _ \\\\ / / / / / + / / / / ___) | |_) | | | (_| __// \\ / / / / + /_/_/_/ |____/| .__/|_|_|\\___\\___/_/\\_\\/_/_/_/ + |_| + + .:Brute Force Utilities For GNU/Linux:. + + + SpliceX is free software: you can redistribute it and/or modify it under + the terms of the GNU General Public License as published by the Free + Software Foundation, either version 3 of the License, or (at your option) + any later version. + + SpliceX is distributed in the hope that it will be useful, but WITHOUT + ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or + FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License + for more details. <http://www.gnu.org/licenses/> + + + +.SH +OPTIONS + +--help Show help display and exit + +--command Parse passwords to this command + +--dictionary Path to custom dictionary(wordlist) + +--rtfm Show manual page and exit + +--restore Path to restore file + +--save Directory path to create save file + +--test Test output of command + +--time Manipulate timed iterations + +--usernames Path to username list + +--exh-l Use an exhaustive attack with letters only + +--exh-n Use an exhaustive attack with numbers only + +--exh-s Use an exhaustive attack with special characters only + +--exh-ln Use an exhaustive attack with letters and numbers only + +--exh-ls Use an exhaustive attack with letters and special + characters only + +--exh-ns Use an exhaustive attack with numbers and special + characters only + +--exh-all Use an exhaustive attack with all characters + +--exh-custom Use an exhaustive attack with custom characters + +--stdout Print only passwords to stdout + +-A Use alphabetical mixing module + +-B Use backwords module + +-C Use alternating caps module + +-L Use "L337" speak module + +-M Use MD5 module + +-N Use numerical mixing module + +-R Use regular words module + +-S Use special mixing module + +--mix-custom Use custom mixing module + +--wep-5 Use 5 character WEP module + +--wep-13 Use 13 character WEP module + +--wep-* Use 5 and 13 character WEP module + +--letters Use letter characters + +--numbers Use number characters + +--specials Use special characters + +--char-all Use all characters + +--no-char Override character usage + +--char-length Start and end with set character lengths + +--custom Use custom characters + +--deshadow Crack shadow hash sums + +--get-shadow Get the shadow info for a user + +--set-shadow Use the shadow info from a file + +--se-module Use the social engineering module + +--create Create a dictionary + +--debug Enable debugging + +.SH +DICTIONARIES + +splicex comes equipped with its own dictionary but is +.br +designed to use custom dictionaries as well. The +.br +dictionary should be in the following format: a plain +.br +text file with one word per line, no spaces between +.br +words, letters only. You do not have to follow the +.br +above guideline exactly but it is strongly suggested. +.br +IE: + +============= NOT ACTUAL LINE ON FILE =============== +.br +qwerty +.br +john +.br +linux +.br +newpass +.br +princess +.br +hacker +.br +============= NOT ACTUAL LINE ON FILE =============== + +.SH +USERNAMES + +splicex is capable of cycling through usernames as it +.br +would a dictionary. There is no default username list +.br +on splicex. The username list should be in the +.br +following format: a plain text file with one word per +.br +line, no spaces between words, letters only. You do +.br +not have to follow the above guideline exactly but it +.br +is strongly suggested. +.br +IE: + +============= NOT ACTUAL LINE ON FILE =============== +.br +john +.br +admin +.br +root +.br +david +.br +fred +.br +============= NOT ACTUAL LINE ON FILE =============== + +.SH +SAVING AND RESTORING + +splicex is capable of restarting where it was stopped +.br +by using the --restore switch followed by the full path to +.br +a splicex.save file. DO NOT modify these files or +.br +splicex may receive an error or not load at all. +.br +When restoring, if you set the --test switch you must +.br +manually set it again or splicex will not test for +.br +specified output. If saving splicex's status, then +.br +splicex will save to the specified directory as +.br +splicex.save. If splicex.save already exists it will +.br +be overwritten so change the name of any original +.br +copies if you want to keep them. If saving a splicex +.br +session you should stop the process using the +.br +appropriate terminal feature before killing splicex +.br +to avoid corrupting the save file. + +--save="/path/to/save/directory/" + +--restore="/path/to/splicex.save/" +.SH +MODULES + +-A -B -C -L -M -N -R -S --mix-custom --wep-5 --wep-13 --wep-* --se-module +.br +splicex comes equipped with several modules that mangle +.br +the words in the selected dictionary to create probable +.br +password combinations. You may use as many of these +.br +modules as you want. Some modules can take a few or more +.br +minutes to enhance a dictionary depending on the size +.br +of the selected dictionary. + +-A Alphabetical Mixing Module: +.br +This module puts several combinations of alphabet +.br +characters inside the words in the selected +.br +dictionary. IE: + +pZassword +.br +pCatssword +.br +passworKd +.br +passwoJrLd +.br +... + +-B Backwards Module: +.br +This module creates backwards words from the +.br +selected dictionary. IE: + +drowssap +.br +... + +-C Capitalization Module: +.br +This module recreates the words in the selected +.br +dictionary with alternating capitalizations. +.br +IE: + +Password +.br +PAssword +.br +PaSsWoRd +.br +pAsSwOrD +.br +passwoRD +.br +... + +-L L337 Speak Module: +.br +This module converts the words in the selected +.br +dictionary to several versions of "l337 speak". +.br +IE: + +p4ssword +.br +p455w0rd +.br +pa5sword +.br +ps@$$word +.br +... + +-N Numerical Mixing Module: +.br +This module puts several combinations of number +.br +characters inside the words in the selected +.br +dictionary. IE: + +p2assword +.br +p5a8ssword +.br +passwor0d +.br +passwo6r9d +.br +... + +-R Regular Words Module: +.br +This module tells splicex to use the words in a +.br +selected dictionary as they are listed. + + +-S Special Mixing Module: +.br +This module puts several combinations of special +.br +characters inside the words in the selected +.br +dictionary. IE: + +p!assword +.br +p@a$ssword +.br +passwor(d +.br +passwo-r+d +.br +... + +--mix-custom Custom Mixing Module: +.br +This module puts several combinations of user +.br +selected characters inside the words from the +.br +selected character list. IE: + +p!assword +.br +p@a$ssword +.br +passwor(d +.br +passwo-r+d +.br +... + +--mix-custom's list should only contain one character per +.br +line on a plain text file. If you select this +.br +module then modules -A, -N, -S will be ignored. +.br +IE: + +============= NOT ACTUAL LINE ON FILE =============== +.br +j +.br +1 +.br +@ +.br +0 +.br +z +.br +============= NOT ACTUAL LINE ON FILE =============== + +If -A, -N, and/or -S options are selected then +.br +the modules will be combined. see also --char-all. IE: + +pZa!ssword +.br +p0atssword +.br +passwor7d +.br +passwo*rLd +.br +... + +-M MD5 Module: +.br +This module generates md5 hash sums for +.br +words listed in the selected dictionary. +.br +IE: + +5912d7bfd10f631f1715bf85bbb72d97 +.br +966e8fda594333563c02fa4b69765a5e +.br +900bc885d7553375aec470198a9514f3 +.br +97f014516561ef487ec368d6158eb3f4 +.br +... + + +--wep-*, --wep-5, --wep-13 WEP Modules: +.br +these two modules strip 5 or 13 character +.br +words from the selected dictionary and produce +.br +WEP compatible hex passwords. If your dictionary +.br +does not contain 5 or 13 character words then +.br +splicex will likely give an error. + + +--se-module Social Engineering Module: +.br +see the social engineering section below for +.br +details. + +.SH +CHARACTERS + +splicex appends alternating character tags to the beginning +.br +and/or ending of each password. By default splicex will use +.br +all standard keyboard characters but you can choose to use +.br +specific combinations. If one or more of the following +.br +options is omitted then only the selected options will be +.br +used ; they will be combined. + +--letters Use letter characters +.br +Apassword +.br +passwordA +.br +abCpassword +.br +passwordxYz +.br +... + +--numbers Use numbers characters +.br +1password +.br +password1 +.br +123password +.br +password098 +.br +... + +--specials Use specials characters +.br +$password +.br +password^ +.br +%)!password +.br +password#*@ +.br +... + +--custom Use custom characters from a list +.br +$password +.br +password^ +.br +%)!password +.br +password#*@ +.br +... + +--custom list should only contain one character per +.br +line on a plain text file. If you select this +.br +module then other character flags will be ignored. +.br +If the custom list matches the selected dictionary +.br +then splicex will run in exhaustive mode. +.br +IE: + +============= NOT ACTUAL LINE ON FILE =============== +.br +j +.br +1 +.br +@ +.br +0 +.br +z +.br +============= NOT ACTUAL LINE ON FILE =============== + +--letters, --numbers, and/or --specials +.br +Apassword6& +.br +7passwordA +.br +a*Cpassword9 +.br +a}password0Yz +.br +... + +--no-char Override character usage +.br +This option tells splicex not to make +.br +any character additions to passwords. + +--char-length Start and end with set character lengths +.br +This option tells splicex to start and stop with a set +.br +amount of characters. IE: + +The following will start with one character added and +.br +end with 3: +.br +splicex --char-length='1, 3' + +The following will generate only 6 character passwords: +.br +splicex --exh-custom='MyCharacters.txt' --char-length='6, 6' + +.SH +SOCIAL ENGINEERING + +--se-module Social Engineering Module: +.br +splicex is equipped with a social engineering module to create +.br +concatenated words from the selected dictionary. This module +.br +allows for "Module Stacking". IE, if you select other other +.br +modules when setting this flag then compiled words will also +.br +be incorporated into the algorithm as if they appeared on the +.br +the selected dictionary itself. + +.SH +DESHADOW + +splicex comes with its own small program to compare a created hash +.br +sum, those found in /etc/shadow with an existing one given through +.br +user input. When using the deshadow option you will need to set +.br +exactly one of the --get-shadow or --set-shadow options. There is no +.br +need to use the --command or the --test flags when using this option +.br +because the values for each will be preset. + +--get-shadow Get the shadow info for a user +.br +see examples below for usage details. + +--set-shadow Use the shadow info from a file. This file should be +.br +in plain text and contain only one line with the +.br +following syntax: + +============= NOT ACTUAL LINE ON FILE =============== +.br +$HashingMethod$SaltValue$ActualHashItself + +============= NOT ACTUAL LINE ON FILE =============== + +If you need to see an example Shadow entry you may +.br +use the following command: + +cat /etc/shadow | grep -i "$USER" + +.SH +EXHAUSTIVE + +splicex is capable of mounting a standard exhaustive attack. +.br +An exhaustive attack is a sure\-fire method to crack any +.br +password but this can also take large amounts of time +.br +depending on the length of a password. If it's necessary to +.br +use an exhaustive bruteforcing algorithm you may do so with +.br +one of the following options: + +--exh-l +.br +This attack uses only letters. + +--exh-n +.br +This attack uses only numbers. + +--exh-s +.br +This attack uses only special characters. + +--exh-ln +.br +This attack uses only letters and numbers. + +--exh-ls +.br +This attack uses only letters and special characters. + +--exh-ns +.br +This attack uses only numbers and special characters. + +--exh-all +.br +This attack uses all characters. + +--exh-custom +.br +This attack uses custom characters in a character list. IE: +.br +--exh-custom='CharList.txt' +.br +A character list should be in the following syntax: + +============= NOT ACTUAL LINE ON FILE =============== +.br +j +.br +1 +.br +@ +.br +0 +.br +z +.br +============= NOT ACTUAL LINE ON FILE =============== + +.SH +STDOUT + +splicex has the option to skip the command and test flags +.br +and print only the created passwords to stdout. This is a +.br +useful flag if you're going to pipe the output to stdin +.br +on another program. + +--stdout +.br +The output will look similar to the following: +.br +password +.br +qwerty +.br +123magick +.br +newpass +.br +john1965 + +.SH +REGEXP + +splicex can create some regexp type functions +.br +using existing options: + +splicex --command='echo onePASSWORDthree' --test='onetwothree' --exh-l + +splicex --command='echo johnPASSWORD65' --test='john1965' --exh-custom='MyList.txt' + +splicex --command='echo ilovePASSWORD' -R --no-char --test='iloveqwerty' + +you may also want to see --se-module for more specific attacks. + +.SH +CONTROLS + +splicex contains some options worth going over again. + +--command='<insert command> PASSWORD' #must contain regexp 'PASSWORD' + +--time='10, 1' #timed iterations + +--custom='file.txt', -U 'file.txt', --dictionary='file.txt', +.br +--exh-custom='file.txt' #custom wordlists and/or character lists + +--no-char #useful flag to only use the generated wordlist +.br +#no characters will be appended to the passwords + +--stdout #prints only passwords + +--debug #helps to troubleshoot + +.SH +EXAMPLES + +splicex --command="unrar -pPASSWORD t file.rar" --test="All OK" -R + +splicex --command="sshpass -pPASSWORD ssh user@host" --dictionary="wordlist" -L + +splicex --command="smbclient -L 192.168.1.0 -Uusername%PASSWORD" -L + +splicex --deshadow --get-shadow="root" -R + +splicex --deshadow --set-shadow="/home/user/shadow.txt" -R + +splicex\\ +.br +--command="echo PASSWORD | aircrack-ng -b 00:11:22:33:44:55 -w - *.cap"\\ +.br +--wep-5 --wep-13 --no-char --dictionary='MyWords.txt'\\ +.br +--test='KEY FOUND' + +splicex --command='curl --user <user[:PASSWORD]> https://www.example.com' -R + |