View Issue Details

IDProjectCategoryView StatusLast Update
0007272Kali LinuxNew Tool Requestspublic2021-08-03 11:25
ReporterManoh Assigned To 
PrioritynormalSeverityfeatureReproducibilityalways
Status closedResolutionsuspended 
Summary0007272: Make a wordlist tool
Description

I have developed a shell script to help pentesters to create and maintain the wild wordlists. You may add it to the repository of Kali if you want. But all pentesters needs this type of scripts.
This is the link, wishing you the best look.

https://github.com/mano-h/make-wordlist

Looking to hearing from you.

Name: Mansour AlShehri

Activities

Gamb1t

Gamb1t

2021-07-31 00:11

reporter   ~0014957

To help speed up the process of evaluating the tool, please make sure to include the following information (the more information you include, the more beneficial it will for us):

[Name] - The name of the tool
[Version] - What version of the tool should be added?
--- If it uses source control (such as git), please make sure there is a release to match (e.g. git tag)
[Homepage] - Where can the tool be found online? Where to go to get more information?
[Download] - Where to go to get the tool? either a download page or a link to the latest version
[Author] - Who made the tool?
[License] - How is the software distributed? What conditions does it come with?
[Description] - What is the tool about? What does it do?
[Dependencies] - What is needed for the tool to work?
[Similar tools] - What other tools are out there?
[Activity] - When did the project start? Is is still actively being deployed?
[How to install] - How do you compile it?
--- Note, using source code to acquire (e.g. git clone/svn checkout) can't be used - Also downloading from the head. Please use a "tag" or "release" version.
[How to use] - What are some basic commands/functions to demonstrate it?

Manoh

Manoh

2021-07-31 01:55

reporter   ~0014959

[Name] - The name of the tool

'make a wordlist', and the file name is mwl.sh

[Version] - What version of the tool should be added?

Version number: 1.1, and no git tag assigned

[Homepage] - Where can the tool be found online?

https://github.com/mano-h/make-wordlist/blob/main/mwl.sh

Where to go to get more information?

https://github.com/mano-h/make-wordlist/blob/main/README.md

[Download] - Where to go to get the tool? either a download page or a link to the latest version

https://github.com/mano-h/make-wordlist.git

[Author] - Who made the tool?

Author: Mansour Abdullah
Developed on: bash, version 5.1.4(1)-release (x86_64-pc-linux-gnu)
Tested on: Ubuntu 18.04.5 LTS

[License] - How is the software distributed? What conditions does it come with?

GNU General Public License v3.0

Permissions => Commercial use, modification, distribution, patent use, and private use

Limitations => liability, and warranty

Conditions => license and copyright notice, state changes, disclose source, and same license

[Description] - What is the tool about? What does it do?

The script is used to help pentesters to organize and identify the wordlist content. It helps the users with more than 20 functionality such as removing, inserting, and replacing the content. I find the difficulty in finding a bash tool to create and control a targeted wordlist. I found some solutions in embedded tools such as burpsuite, but we like to deal with the terminal as a linux pros. It was so difficult to write this code, the code length exceeded 1000 lines reflecting the difficulty of mixing between the program effectiveness, and the users experience.

[Dependencies] - What is needed for the tool to work?

The tool is written to work as shell script, it works on bash
Included tools: tr, md5sum, shasum, sha2sum, awk, echo, stty

[Similar tools] - What other tools are out there?

https://github.com/LandGrey/pydictor => this tool is in python, advanced text-process, my tool is for shell user, simplified functions and effected with wild wordlists.

[Activity] - When did the project start? Is is still actively being deployed?

Version one is ready to use, the development process started on 3/6/2021 I spent around two months

[How to install] - How do you compile it?
--- Note, using source code to acquire (e.g. git clone/svn checkout) can't be
used - Also downloading from the head. Please use a "tag" or "release" version.

[How to use] - What are some basic commands/functions to demonstrate it?

Main syntax:
./wlm.sh -f 'input file name' -o 'output file name' -m 'mode' -p 'pattern string'
usage instructions:

\t-f input file name, or path

\t-p pattern string

\t-o output file

\t-h help

\t-i show version info

\t-d add this script to PATH, for fast access

the mode type could be:



    supported modes:

    remove_all             remove string that contains any pattern char(s)
    remove_part          remove the pattern letter(s) then concatinate the word
    remove_bysize      remove the word if matches the given size
    remove_byindex   remove the letter by given index and concatinate the word
        remove_byline       remove the word by given line number

    postfix                    append pattern letter to the end of the word
    prefix                      append pattern letter to the begining of the word   

    replace_by             replace the original letter(s) set by the given letter(s) set
    replace_bysize      replace the existent word of specified size by the given letter(s) set
    replace_byindex   replace the letter(s) of given index(s) by the given letter(s) set (overwrite existent letters)

    upper                  convert the string to upper letter case
    lower                  convert the string to lower letter case
    upper_as           convert the string to upper letter case for given pattern string
    lower_as           convert the string to lower letter case for given pattern string

    combine        compine the current input file's content to another one
    convert                convert the file content to wordlist

    hash               hash the wordlist content, the supported hash patterns are md5, sha1, and sha2
    encode                 encode the wordlist string, supported method is url encoding
    decode                decode the wordlist string, supported method is url decoding

    statistics               show information about the input wordlist

    insert_byindexA  insert the letter(s) after the  given index                 (does not overwrite existent letters)
    insert_byindexB  insert the letter(s) before the given index               (does not overwrite existent letters)
    insert_byA            insert the letter(s) After given substring or char    (does not overwrite existent letters)
        insert_byB            insert the letter(s) before given substring or char (does not overwrite existent letters)

*please notice, converting the strings to array of letters makes it possible to control the string from any position(index) regarding the limitation of bash capabilities, and the tool may grow in the future to use AI techniques.

I have notified the users about the delay of using statistics key whereas it spends long time with long wordlists, this happen with many tools on Kali such as chrunch and testing tools. The statistics key uses two loops, the inner loops reduced overtime to save the computer power and process time, but the length of the wordlist will overload any try to avoid this.

Please notify me about any future requirement and need help.

Thanks.

g0tmi1k

g0tmi1k

2021-08-03 11:25

administrator   ~0014962

Great start, however, I feel this tool needs to become more mature

Issue History

Date Modified Username Field Change
2021-07-29 20:20 Manoh New Issue
2021-07-30 13:25 g0tmi1k Description Updated
2021-07-31 00:11 Gamb1t Note Added: 0014957
2021-07-31 00:14 Gamb1t Assigned To => g0tmi1k
2021-07-31 00:14 Gamb1t Status new => assigned
2021-07-31 01:55 Manoh Note Added: 0014959
2021-08-03 11:21 g0tmi1k Assigned To g0tmi1k =>
2021-08-03 11:22 g0tmi1k Status assigned => new
2021-08-03 11:25 g0tmi1k Note Added: 0014962
2021-08-03 11:25 g0tmi1k Status new => closed
2021-08-03 11:25 g0tmi1k Resolution open => suspended