bopscrk: generate smart and powerful wordlists

Bopscrk

Bopscrk (Before Outset PaSsword CRacKing) is a tool to generate smart and powerful wordlists.

Included in BlackArch Linux pentesting distribution and Rawsec’s Cybersecurity Inventory since August 2019.

The first idea was inspired by Cupp and Crunch. We could say that bopscrk is a wordlist generator situated between them, taking the best of each one. The challenge was applying Cupp’s idea to more generic-situations and amplifying the resultant wordlist’s shoot-range, without losing this custom-wordlist-profiler feature.

How it works

• You have to provide some words which will act as a base.
• The tool will generate all possible combinations between them.
• To generate more combinations, it will add some common separators (e.g. “-“, “_”, “.”), random numbers, and special chars.
• You can enable leet and case transform to increase your chances.
• If you enable lyricpass mode, the tool will ask you about artists and it will download all his songs’ lyrics. Each line will be added as a new word. Then it will be transformed in several ways (leet, case, only first letters, with and without spaces…). Artist names will be added too.
• You can provide wordlists that you already tried against the target in order to exclude all these words from the resultant wordlist (-x).

Install

git clone https://github.com/r3nt0n/bopscrk.git
cd bopscrk
pip3 install -r requirements.txt

Use

 -h, --help         show this help message and exit
  -i, --interactive  interactive mode, the script will ask you about target
  -w                 words to combine comma-separated (non-interactive mode)
  --min              min length for the words to generate (default: 4)
  --max              max length for the words to generate (default: 32)
  -c, --case         enable case transformations
  -l, --leet         enable leet transformations
  -n                 max amount of words to combine each time (default: 2)
  -a , --artists     artists to search song lyrics (comma-separated)
  -A, --lyrics-all   enable all possible transforms with lyrics
  -x , --exclude     exclude all the words included in other wordlists
                     (several wordlists should be comma-separated)
  -o , --output      output file to save the wordlist (default: tmp.txt)

Tips

• Fields can be left empty.
• Words have to be written without accents, just normal characters.
• In the others field, you can write several words comma-separated. Example: 2C, Flipper.
• Using the non-interactive mode, you should provide years in the long and short way (1970,70) to get the same result than the interactive mode.
• You have to be careful with -n argument. If you set a big value, it could result in too huge wordlists. I recommend the values between 2 and 5.
• To feed lyricpass with several artists through the command line you should provide it comma-separated and quotes-enclosed. Example: -a “john doe, john smith”

Lyricpass

This feature is based on a modified version of a tool developed originally by initstring.

It will retrieve all lyrics from all songs which belong to artists that you provide. As this feature can make the wordlist grow too much, by default it will store each phrase reduced to its initials (which will be transformed later if you have activated leet and case transforms). As one of the main methods to use lyrics as a password is to take just initials, It should be usually enough.

With –lyrics-all, it will store the raw phrases too and apply some transforms over them (like convert spaces into dots and other special chars). This method is strongly unrecommended because 5000 phrases could become 5.000.000 easily.

If you want to make an extensive and accurate lyrics-wordlist related to a target, a better choice is to use it without any other words added (and maybe without leet and case transforms).

Legal disclaimer

This tool is created for the sole purpose of security awareness and education, it should not be used against systems that you do not have permission to test/attack. The author is not responsible for misuse or for any damage that you may cause. You agree that you use this software at your own risk.

Copyright (C) 2018 r3nt0n

Source: https://github.com/r3nt0n/