rsmangler

Mangling the Wordlist Making variants of your list of plaintext words is useful. Cagey users want an easy to remember password but they also want to obfuscate it just a bit to feel secure.

rsmangler is a tool that takes wordlists and "mangles" them by adding, leet speak, numbers, years, mix case, special characters and various other flags.

Read the man page for rsmangler: Note that switches disable certain "mangles" Select the 4-5 most unique words for each of the target users (so, create 4 lists total) Run rsmangler on each list - in the interest of time

  • password sizes will range from 9-12 characters (use min/max)

  • Ideally, you should have a list under 1,500 entries

  • The linux "wc" command (aka word count) can show you how many lines are in a file

  • Record the command you used

Here's an example source and mangled wordlist counts, you want to keep yours of similar size or smaller.

Note, all mangle options are ON by default, these parameters turn them OFF.

rsmangler.rb [OPTION]

--help, -h: show help
--file, -f: the input file, use - for STDIN
--perms, -p: permutate all the words
--double, -d: double each word
--reverse, -r: reverser the word
--leet, -t: l33t speak the word
--full-leet, -T: all posibilities l33t
--capital, -c: capitalise the word
--upper, -u: uppercase the word
--lower, -l: lowercase the word
--swap, -s: swap the case of the word
--ed, -e: add ed to the end of the word
--ing, -i: add ing to the end of the word
--punctuation: add common punctuation to the end of the word
--pna: add 01 - 09 to the end of the word
--pnb: add 01 - 09 to the beginning of the word
--na: add 1 - 123 to the end of the word
--nb: add 1 - 123 to the beginning of the word
--years: add all years from 1990 to current year to start and end
--acronym: create an acronym based on all the words entered in order and add to word list
--common: add the following words to start and end: admin, sys, pw, pwd
--force: don't give the warning about list length
--allow-duplicates - allow duplicates in the output list

Last updated