Wordlists and Rules
Building dictionaries.
Why Wordlists Matter
Most passwords are not random — people reuse common words, patterns, and substitutions. A wordlist (dictionary) is a file of candidate passwords. Quality wordlists are the single biggest factor in cracking success for human-chosen passwords.
Classic Wordlists
The most famous wordlist is rockyou.txt, leaked from a 2009 breach of 32 million real passwords. It ships with Kali. The SecLists project bundles many curated lists for passwords, usernames, and fuzzing.
/usr/share/wordlists/rockyou.txt
/usr/share/seclists/Passwords/All lessons in this course
- Wordlists and Rules
- Hashcat
- John the Ripper
- Online vs Offline Attacks