├── LICENSE ├── README.md ├── cewl_wordlists ├── Net-NTLMv1.hash.cewl-list.txt ├── demo.cewl-wordlist.txt ├── md5.hash.cewl-list.txt └── md5.hash.cewl-wordlist.txt ├── hash_upload ├── Net-NTLMv1.hash ├── Net-NTLMv2.hash ├── kerberos.hash ├── kerberos.hash_users ├── md5.hash └── md5.hash_users ├── hat.py ├── l00t ├── example.pot.sorted └── md5.hash.pot ├── rsmangler ├── input │ ├── out.test │ ├── test │ └── testrun └── output │ ├── out.test │ └── testrun ├── rules ├── Incisive-leetspeak.rule ├── InsidePro-HashManager.rule ├── InsidePro-PasswordsPro.rule ├── OneRuleToRuleThemAll.rule ├── T0XlC-insert_00-99_1950-2050_toprules_0_F.rule ├── T0XlC-insert_space_and_special_0_F.rule ├── T0XlC-insert_top_100_passwords_1_G.rule ├── T0XlC.rule ├── T0XlCv1.rule ├── best64.rule ├── combinator.rule ├── d3ad0ne.rule ├── d3adhob0.rule ├── dive.rule ├── generated.rule ├── generated2.rule ├── hob064.rule ├── leetspeak.rule ├── nsa64.rule ├── oscommerce.rule ├── passphrase-rule1.rule ├── passphrase-rule2.rule ├── prince_optimized.rule ├── rockyou-30000.rule ├── specific.rule ├── toggles1.rule ├── toggles2.rule ├── toggles3.rule ├── toggles4.rule ├── toggles5.rule └── unix-ninja-leetspeak.rule ├── stats └── md5.hash.pot.stats ├── tools ├── Gemfile ├── cap2hccapx.bin ├── cewl.rb ├── cewl_lib.rb ├── fab.rb ├── hcxdumptool ├── pp.save ├── pp64.bin ├── rsmangler.rb └── statsgen └── wireless_upload ├── capula-guest-1-02.cap ├── capula-guest-1-02.hccapx └── test.txt /README.md: -------------------------------------------------------------------------------- 1 | # HAT - Hashcat Automation Tool 2 | An automated Hashcat tool for common wordlists and rules to speed up the process of cracking hashes during engagements. 3 | HAT is simply a wrapper for Hashcat (with a few extra features) - https://hashcat.net, however I take no credit for that superb tool. 4 | 5 | Walkthrough of features - https://sp00ks-git.github.io/posts/HAT-Features/ 6 | 7 | ***This version is for Linux only - see the Windows Repo*** 8 | 9 | Supported Hashes: 10 | 11 | NTLMv2 (NTHASH) -> NetNTLMv1 -> NetNTLMv2 -> MD5 -> SHA-512 -> RC4-HMAC-MD5 (Kerberoasting) 12 | 13 | 14 | Features: 15 | 16 | * Straight Wordlist testing from publicy known breaches (dependant on your wordlists) 17 | * Straight Wordlists using the Oxford Dictionary incrmementing through various combinations 18 | * Common Rule sets used in corporate environments 19 | * Smart ordering of compromised hashes alphabetically in (Username::Domain:Hash:Password) format. 20 | * Visual hash cracking status showing you how many hashes you have left to crack 21 | * Cewl Integration for finding specific words common to the business not found in dictionaries or breached lists 22 | * Rsmangler Integration for finding permutations of a specific word that the firm might be using. (includes incrementing various combinations on either side) 23 | 24 | 25 | The directory structure that HAT expects is.. (of course you can just ammend the code to your own needs) 26 | 27 | -> /opt/worliststs/rockyou.txt 28 | -> /opt/wordlists/1GB-4GB/ 29 | -> /opt/wordlists/4GB+/ 30 | -> /opt/wordlists/english-words/ 31 | -> /opt/wordlists/merged_list/ 32 | 33 | Suggested Wordlists download links (HTTP) - working as of 14/10/2019 34 | * https://github.com/brannondorsey/naive-hashcat/releases/download/data/rockyou.txt (~14,300,000 words) 35 | * http://www.mediafire.com/file/9tf3n2d45tgktq1/Rocktastic12a.7z/file (1.37GB - Compressed) 36 | * https://github.com/dwyl/english-words/blob/master/words.txt (~466,000 words) 37 | * http://storage.aircrack-ng.org/users/PsycO/PsycOPacKv2.rar (1.4GB) 38 | * https://download.g0tmi1k.com/wordlists/large/sp00ks_merged_file_uniq.7z (2.7 GB - Compressed) 39 | * https://crackstation.net/files/crackstation-human-only.txt.gz (4.2 GB) 40 | * https://download.g0tmi1k.com/wordlists/large/crackstation.txt.gz (4.5 GB) 41 | * https://download.g0tmi1k.com/wordlists/large/10-million-combos.zip (8.8 GB) 42 | * https://download.g0tmi1k.com/wordlists/large/36.4GB-18_in_1.lst.7z (48.4 GB) 43 | * https://download.g0tmi1k.com/wordlists/large/b0n3z-wordlist-sorted-something.tar.gz (165 GB) 44 | * http://download1568.mediafire.com/yuh4jmehecwg/8oazhwqzexid771/WordlistBySheez_v8.7z (166.17 GB) 45 | * https://hashkiller.io/downloads/hashkiller-dict-2020-01-26.7z 46 | 47 | 48 | Thanks to: 49 | 50 | Cewl - @digininja - https://github.com/digininja/CeWL 51 | Passphrases - @initstring - https://github.com/initstring/passphrase-wordlist 52 | Rsmangler - @digininja - https://github.com/digininja/RSMangler 53 | 54 | -------------------------------------------------------------------------------- /cewl_wordlists/Net-NTLMv1.hash.cewl-list.txt: -------------------------------------------------------------------------------- 1 | Berlin 2 | berlin 3 | https 4 | hours 5 | Google 6 | years 7 | Germany 8 | Search 9 | German 10 | results 11 | history 12 | built 13 | November 14 | after 15 | cctlcm 16 | anniversary 17 | Memorial 18 | divided 19 | Europe 20 | History 21 | wikipedia 22 | world 23 | since 24 | today 25 | tools 26 | month 27 | Posted 28 | barrier 29 | Wikipedia 30 | Checkpoint 31 | AdMob 32 | between 33 | memorial 34 | Guardian 35 | books 36 | within 37 | Charlie 38 | English 39 | Books 40 | Video 41 | Please 42 | click 43 | redirected 44 | seconds 45 | August 46 | Brandenburg 47 | first 48 | Gallery 49 | almost 50 | SettingsPrivacyTerms 51 | Verbatim 52 | about 53 | YouTube 54 | Anniversary 55 | arrow 56 | Thirty 57 | Images 58 | searches 59 | google 60 | Shopping 61 | Construction 62 | Reichstag 63 | Duration 64 | united 65 | location 66 | Islands 67 | border 68 | Related 69 | started 70 | mistake 71 | stories 72 | length 73 | Murdered 74 | theguardian 75 | toppled 76 | gallery 77 | youtube 78 | World 79 | content 80 | europe 81 | marks 82 | videos 83 | Business 84 | Twitter 85 | independent 86 | Berliner 87 | newsCtrl 88 | posts 89 | place 90 | Times 91 | Arrow 92 | Settings 93 | United 94 | people 95 | Español 96 | Germans 97 | visitberlin 98 | Mauer 99 | search 100 | which 101 | entire 102 | Videos 103 | during 104 | concrete 105 | downed 106 | remains 107 | lessons 108 | photos 109 | Image 110 | result 111 | watch 112 | dancefloor 113 | events 114 | Soviet 115 | Latinoamérica 116 | upload 117 | event 118 | Watching 119 | bottle 120 | President 121 | edition 122 | destruction 123 | Today 124 | minutes 125 | Gmail 126 | guarded 127 | through 128 | title 129 | video 130 | Independent 131 | facts 132 | wikimedia 133 | commons 134 | Border 135 | Facts 136 | SafeSearch 137 | Mauerfall 138 | reunification 139 | Telegraph 140 | learn 141 | purpose 142 | pages 143 | eastern 144 | stores 145 | still 146 | image 147 | uploads 148 | located 149 | division 150 | building 151 | Demolished 152 | thumb 153 | Drive 154 | physically 155 | ideologically 156 | Ronald 157 | HISTORY 158 | public 159 | capital 160 | Bernauer 161 | People 162 | Berliners 163 | moments 164 | Reagan 165 | these 166 | words 167 | Scale 168 | mobile 169 | things 170 | around 171 | sites 172 | symbol 173 | death 174 | historic 175 | germany 176 | access 177 | twitter 178 | marked 179 | memorable 180 | advertisers 181 | bricklayer 182 | About 183 | After 184 | deaths 185 | official 186 | topic 187 | places 188 | cookies 189 | three 190 | later 191 | Republic 192 | Demolition 193 | Photos 194 | separating 195 | Western 196 | العربية 197 | related 198 | happened 199 | separated 200 | visitBerlin 201 | britannica 202 | million 203 | Gedenksttte 204 | Holocaust 205 | miles 206 | BerlinWall 207 | Advanced 208 | Privacy 209 | Terms 210 | Kingdom 211 | weeks 212 | walls 213 | bring 214 | moment 215 | pictures 216 | share 217 | Improve 218 | Analytics 219 | century 220 | there 221 | story 222 | former 223 | divide 224 | build 225 | brandenburg 226 | iconic 227 | Britannica 228 | static 229 | mauer 230 | reichstag 231 | language 232 | should 233 | images 234 | AllImagesVideosNews 235 | falling 236 | Curtain 237 | Quartz 238 | seemed 239 | cities 240 | country 241 | checkpoints 242 | recall 243 | Accident 244 | nytimes 245 | Calendar 246 | business 247 | their 248 | European 249 | files 250 | checkpoint 251 | charlie 252 | berlinmap 253 | thumbnails 254 | adjacent 255 | experience 256 | developers 257 | shows 258 | pivotal 259 | following 260 | Building 261 | hyper 262 | gentrification 263 | Democracy 264 | brought 265 | entertainment 266 | Doodle 267 | indiatimes 268 | before 269 | region 270 | France 271 | South 272 | Advertise 273 | users 274 | bleed 275 | opened 276 | celebrates 277 | millions 278 | night 279 | nearly 280 | bBerlin 281 | together 282 | Since 283 | freedom 284 | Attractions 285 | historical 286 | western 287 | Things 288 | government 289 | Definition 290 | Length 291 | surrounded 292 | prevented 293 | Malta 294 | demolition 295 | schnapps 296 | wrong 297 | tells 298 | writers 299 | reflect 300 | Krtschell 301 | timesofindia 302 | crashing 303 | French 304 | Guinea 305 | Indonesia 306 | States 307 | published 308 | Solutions 309 | website 310 | Cloud 311 | visitors 312 | Local 313 | Français 314 | Years 315 | thoughtco 316 | duration 317 | across 318 | Insider 319 | product 320 | William 321 | topics 322 | Address 323 | Sights 324 | known 325 | soldiers 326 | Strasse 327 | Strae 328 | Guide 329 | under 330 | preserve 331 | territory 332 | berlinwall 333 | total 334 | kilometres 335 | towers 336 | billion 337 | browser 338 | showing 339 | explicit 340 | helps 341 | Where 342 | commenced 343 | began 344 | Symbols 345 | failure 346 | deeper 347 | issue 348 | connects 349 | poured 350 | clubbers 351 | illegal 352 | raves 353 | helped 354 | nation 355 | BERLIN 356 | paved 357 | videoshow 358 | numbers 359 | Website 360 | House 361 | better 362 | Cause 363 | divisions 364 | remain 365 | celebrating 366 | Watch 367 | unity 368 | Story 369 | evening 370 | monument 371 | Sunday 372 | communist 373 | segments 374 | stood 375 | Imperial 376 | Everything 377 | styles 378 | visit 379 | erected 380 | because 381 | house 382 | preferences 383 | until 384 | enable 385 | moreShow 386 | customisation 387 | declared 388 | Summit 389 | Destroyed 390 | Official 391 | Three 392 | Jeremy 393 | Corbyn 394 | Soldier 395 | KentOnline 396 | Breaking 397 | Location 398 | commentisfree 399 | guardian 400 | Werner 401 | pastor 402 | dissident 403 | heard 404 | quite 405 | believe 406 | October 407 | Island 408 | Ireland 409 | Microsoft 410 | Measure 411 | Learn 412 | money 413 | solutions 414 | Brasil 415 | victory 416 | capitalism 417 | communism 418 | democracy 419 | review 420 | barbed 421 | decades 422 | Historical 423 | AllImagesMapsNews 424 | Directions 425 | served 426 | tripadvisor 427 | Rating 428 | famous 429 | freetoursbyfoot 430 | museum 431 | theculturetrip 432 | centre 433 | berliner 434 | central 435 | strip 436 | socialist 437 | political 438 | berlinwallmap 439 | ending 440 | carte 441 | months 442 | state 443 | newsround 444 | destroyed 445 | escaping 446 | Simple 447 | simple 448 | Other 449 | dimensions 450 | wrenching 451 | articles 452 | second 453 | parallel 454 | fence 455 | metres 456 | farther 457 | remember 458 | areas 459 | approximately 460 | guard 461 | checkoutsam 462 | Latest 463 | mediumDate 464 | snippet 465 | consultation 466 | searchLanguage 467 | AdvertisingProgrammesBusiness 468 | SolutionsAbout 469 | GoogleGoogle 470 | saved 471 | filter 472 | relevant 473 | settings 474 | HelpPrivacyTerms 475 | Democratic 476 | calling 477 | formally 478 | colour 479 | North 480 | terms 481 | Network 482 | available 483 | Campaigns 484 | Platform 485 | manage 486 | Deutsch 487 | Русский 488 | Medium 489 | accident 490 | Advertising 491 | Short 492 | sparked 493 | Sorted 494 | David 495 | where 496 | thought 497 | Using 498 | Revolution 499 | Empire 500 | series 501 | other 502 | national 503 | learned 504 | extraordinary 505 | telegraph 506 | formats 507 | Dates 508 | fascists 509 | Museums 510 | Second 511 | zones 512 | Brief 513 | Built 514 | point 515 | system 516 | prevent 517 | Street 518 | Tours 519 | murdered 520 | holocaust 521 | Bundestag 522 | looks 523 | Events 524 | products 525 | Currently 526 | Wikipediahttps 527 | Destruction 528 | Opened 529 | Height 530 | summer 531 | eventual 532 | important 533 | terrier 534 | exact 535 | Chinese 536 | Russian 537 | Samoa 538 | British 539 | Virgin 540 | Canada 541 | Congo 542 | Georgia 543 | India 544 | Malaysia 545 | Korea 546 | Portugal 547 | Russia 548 | Thailand 549 | domain 550 | links 551 | format 552 | Adobe 553 | Earth 554 | usage 555 | commercially 556 | modify 557 | phone 558 | Display 559 | popular 560 | right 561 | Suite 562 | AdSense 563 | Centre 564 | Change 565 | Bahasa 566 | Português 567 | Labeled 568 | reuse 569 | modern 570 | theconversation 571 | impact 572 | Legacy 573 | borders 574 | allowing 575 | biggest 576 | sending 577 | shock 578 | waves 579 | conference 580 | sitting 581 | updates 582 | fascinating 583 | legacy 584 | makers 585 | Saturday 586 | changed 587 | Behind 588 | Rifleman 589 | Front 590 | Alamein 591 | Dresden 592 | Victor 593 | Middle 594 | construction 595 | dividing 596 | account 597 | great 598 | times 599 | could 600 | Peter 601 | citizens 602 | announced 603 | marking 604 | grabbed 605 | archive 606 | crossing 607 | assets 608 | Museum 609 | posing 610 | performers 611 | Denkmal 612 | Hours 613 | Phone 614 | tickets 615 | commemorates 616 | Federal 617 | gedenkstaette 618 | exhibition 619 | Jewish 620 | inner 621 | Revolutions 622 | occupation 623 | control 624 | Britain 625 | interactive 626 | Printable 627 | localisation 628 | gates 629 | seperating 630 | missing 631 | pieces 632 | Course 633 | route 634 | overall 635 | concept 636 | Senate 637 | intends 638 | overlay 639 | Happened 640 | Pictures 641 | Newsround 642 | Gorbachev 643 | thesun 644 | approaching 645 | coming 646 | encyclopedia 647 | capture 648 | tunnel 649 | Whatever 650 | fences 651 | Dailysoft 652 | dailysoft 653 | escaped 654 | population 655 | Witnesses 656 | village 657 | split 658 | symbols 659 | captured 660 | close 661 | learnoutlive 662 | innerg 663 | personnel 664 | explosive 665 | devices 666 | landmines 667 | compared 668 | businessinsider 669 | Mitte 670 | arrive 671 | Locations 672 | myguideberlin 673 | begins 674 | Structure 675 | Places 676 | space 677 | Commission 678 | mauerfall 679 | usatoday 680 | MauerFall 681 | Willem 682 | special 683 | currency 684 | latest 685 | breaking 686 | entering 687 | undermining 688 | primarily 689 | objective 690 | stemming 691 | defections 692 | Looking 693 | programmatic 694 | demand 695 | Mediation 696 | networks 697 | native 698 | innovative 699 | engaged 700 | Choose 701 | unlimited 702 | analytics 703 | Firebase 704 | deals 705 | without 706 | increase 707 | Global 708 | requests 709 | specialists 710 | downloads 711 | Request 712 | disabled 713 | Setting 714 | Languages 715 | Which 716 | EnglishEdit 717 | Filters 718 | block 719 | inappropriate 720 | accurate 721 | avoid 722 | violent 723 | adult 724 | Results 725 | Faster 726 | Slower 727 | Instant 728 | activity 729 | recommendations 730 | using 731 | Region 732 | retain 733 | Czech 734 | Estonian 735 | Filipino 736 | Greek 737 | American 738 | Argentina 739 | Australia 740 | Bolivia 741 | Central 742 | Chile 743 | China 744 | Colombia 745 | Costa 746 | Cyprus 747 | Ecuador 748 | Egypt 749 | Salvador 750 | Guatemala 751 | Honduras 752 | Moldova 753 | Zealand 754 | Nicaragua 755 | Nigeria 756 | Pakistan 757 | Paraguay 758 | Philippines 759 | Poland 760 | Puerto 761 | Saudi 762 | Arabia 763 | Singapore 764 | Slovakia 765 | Africa 766 | Lanka 767 | Emirates 768 | Uruguay 769 | Venezuela 770 | updated 771 | whole 772 | filtered 773 | visited 774 | opening 775 | Stanfords 776 | spend 777 | websites 778 | based 779 | offer 780 | Universal 781 | Promote 782 | online 783 | credit 784 | promote 785 | platform 786 | while 787 | working 788 | insights 789 | Android 790 | Mobile 791 | Follow 792 | Deutschland 793 | España 794 | Italiano 795 | Italia 796 | Polski 797 | Polska 798 | Tiếng 799 | Türkçe 800 | Türkiye 801 | Россия 802 | الإمارات 803 | المتحدة 804 | Photo 805 | washingtonpost 806 | children 807 | Celebration 808 | reshaped 809 | politics 810 | feedback 811 | Programmes 812 | quality 813 | euronews 814 | Archives 815 | relevance 816 | seminar 817 | Deutsche 818 | towns 819 | hands 820 | failed 821 | divides 822 | teenager 823 | hopes 824 | economic 825 | collapse 826 | selection 827 | article 828 | Changed 829 | Untold 830 | family 831 | reviews 832 | inside 833 | Revell 834 | constructed 835 | Musical 836 | Journey 837 | Includes 838 | buildings 839 | witnessed 840 | meaning 841 | barriers 842 | Forty 843 | Autumns 844 | compelling 845 | Music 846 | occupied 847 | scenes 848 | bWall 849 | bFall 850 | authorities 851 | vital 852 | Stasi 853 | gathered 854 | completely 855 | surprising 856 | schools 857 | workers 858 | remembered 859 | jubilant 860 | discussion 861 | created 862 | assumed 863 | definitive 864 | liberal 865 | completion 866 | doodle 867 | would 868 | represent 869 | police 870 | points 871 | meant 872 | memorials 873 | Prussian 874 | Frederick 875 | successful 876 | Platz 877 | style 878 | Completed 879 | landmark 880 | thelocal 881 | Cities 882 | banned 883 | Information 884 | fleeing 885 | default 886 | AllMapsImagesNews 887 | murals 888 | street 889 | section 890 | quickly 891 | along 892 | became 893 | largest 894 | Culture 895 | guide 896 | Closes 897 | middle 898 | Situated 899 | large 900 | audio 901 | being 902 | Frontpage 903 | Sightseeing 904 | parliament 905 | completed 906 | easing 907 | travel 908 | restrictions 909 | thousands 910 | demanded 911 | passage 912 | effects 913 | including 914 | Event 915 | phrase 916 | quotes 917 | miniature 918 | standard 919 | minus 920 | rodent 921 | Russell 922 | ranging 923 | stops 924 | measurement 925 | narrow 926 | Afrikaans 927 | Arabic 928 | Armenian 929 | Belarusian 930 | Bulgarian 931 | Catalan 932 | Simplified 933 | Traditional 934 | Croatian 935 | Danish 936 | Dutch 937 | Esperanto 938 | Finnish 939 | Hebrew 940 | Hindi 941 | Hungarian 942 | Icelandic 943 | Indonesian 944 | Italian 945 | Japanese 946 | Korean 947 | Latvian 948 | Lithuanian 949 | Norwegian 950 | Persian 951 | Polish 952 | Portuguese 953 | Romanian 954 | Serbian 955 | Slovak 956 | Slovenian 957 | Spanish 958 | Swahili 959 | Swedish 960 | Turkish 961 | Ukrainian 962 | Vietnamese 963 | select 964 | Afghanistan 965 | Albania 966 | Algeria 967 | Andorra 968 | Angola 969 | Anguilla 970 | Antarctica 971 | Antigua 972 | Barbuda 973 | Armenia 974 | Aruba 975 | Austria 976 | Azerbaijan 977 | Bahamas 978 | Bahrain 979 | Bangladesh 980 | Barbados 981 | Belarus 982 | Belgium 983 | Belize 984 | Benin 985 | Bermuda 986 | Bhutan 987 | Bosnia 988 | Herzegovina 989 | Botswana 990 | Bouvet 991 | Brazil 992 | Indian 993 | Ocean 994 | Territory 995 | Brunei 996 | Bulgaria 997 | Burkina 998 | Burundi 999 | Cambodia 1000 | Cameroon 1001 | Verde 1002 | Cayman 1003 | African 1004 | Christmas 1005 | Cocos 1006 | Keeling 1007 | Comoros 1008 | Brazzaville 1009 | Kinshasa 1010 | Ivoire 1011 | Croatia 1012 | Czechia 1013 | Denmark 1014 | Djibouti 1015 | Dominica 1016 | Dominican 1017 | Equatorial 1018 | Eritrea 1019 | Estonia 1020 | Eswatini 1021 | Ethiopia 1022 | Falkland 1023 | Islas 1024 | Malvinas 1025 | Faroe 1026 | Finland 1027 | Guiana 1028 | Polynesia 1029 | Southern 1030 | Territories 1031 | Gabon 1032 | Gambia 1033 | Ghana 1034 | Gibraltar 1035 | Greece 1036 | Greenland 1037 | Grenada 1038 | Guadeloupe 1039 | Bissau 1040 | Guyana 1041 | Haiti 1042 | Heard 1043 | McDonald 1044 | Hungary 1045 | Iceland 1046 | Israel 1047 | Italy 1048 | Jamaica 1049 | Japan 1050 | Jordan 1051 | Kazakhstan 1052 | Kenya 1053 | Kiribati 1054 | Kuwait 1055 | Kyrgyzstan 1056 | Latvia 1057 | Lebanon 1058 | Lesotho 1059 | Liberia 1060 | Libya 1061 | Liechtenstein 1062 | Lithuania 1063 | Luxembourg 1064 | Macao 1065 | Madagascar 1066 | Malawi 1067 | Maldives 1068 | Marshall 1069 | Martinique 1070 | Mauritania 1071 | Mauritius 1072 | Mayotte 1073 | Mexico 1074 | Micronesia 1075 | Monaco 1076 | Mongolia 1077 | Montserrat 1078 | Morocco 1079 | Mozambique 1080 | Myanmar 1081 | Burma 1082 | Namibia 1083 | Nauru 1084 | Nepal 1085 | Netherlands 1086 | Caledonia 1087 | Niger 1088 | Norfolk 1089 | Macedonia 1090 | Northern 1091 | Mariana 1092 | Norway 1093 | Palau 1094 | Palestine 1095 | Panama 1096 | Papua 1097 | Pitcairn 1098 | Qatar 1099 | Runion 1100 | Romania 1101 | Rwanda 1102 | Marino 1103 | Prncipe 1104 | Senegal 1105 | Serbia 1106 | Seychelles 1107 | Sierra 1108 | Leone 1109 | Slovenia 1110 | Solomon 1111 | Somalia 1112 | Sandwich 1113 | Spain 1114 | Helena 1115 | Kitts 1116 | Nevis 1117 | Lucia 1118 | Pierre 1119 | Miquelon 1120 | Vincent 1121 | Grenadines 1122 | Sudan 1123 | Suriname 1124 | Svalbard 1125 | Mayen 1126 | Sweden 1127 | Switzerland 1128 | Syria 1129 | Taiwan 1130 | Tajikistan 1131 | Tanzania 1132 | Tokelau 1133 | Tonga 1134 | Trinidad 1135 | Tobago 1136 | Tunisia 1137 | Turkey 1138 | Turkmenistan 1139 | Turks 1140 | Caicos 1141 | Tuvalu 1142 | Outlying 1143 | Uganda 1144 | Ukraine 1145 | Uzbekistan 1146 | Vanuatu 1147 | Vatican 1148 | Vietnam 1149 | Wallis 1150 | Futuna 1151 | Sahara 1152 | Yemen 1153 | Zambia 1154 | Zimbabwe 1155 | particular 1156 | update 1157 | anytime 1158 | specify 1159 | limit 1160 | appearing 1161 | anywhere 1162 | address 1163 | looking 1164 | Filter 1165 | whether 1166 | sexually 1167 | Acrobat 1168 | Postscript 1169 | Autodesk 1170 | Excel 1171 | PowerPoint 1172 | Format 1173 | Shockwave 1174 | Flash 1175 | prefer 1176 | rights 1177 | licence 1178 | yourself 1179 | similar 1180 | operators 1181 | Customise 1182 | directions 1183 | local 1184 | support 1185 | Support 1186 | customers 1187 | store 1188 | understand 1189 | passion 1190 | profit 1191 | small 1192 | decisions 1193 | Digital 1194 | Garage 1195 | Explore 1196 | Chrome 1197 | Enterprise 1198 | Manager 1199 | Developers 1200 | Eesti 1201 | Nederlands 1202 | Română 1203 | Suomi 1204 | background 1205 | Blogger 1206 | policies 1207 | Eastern 1208 | Options 1209 | color 1210 | modification 1211 | noncommercial 1212 | foreignpolicy 1213 | comThe 1214 | comFall 1215 | chathamhouse 1216 | orlandosentinel 1217 | comWorld 1218 | explainer 1219 | project 1220 | syndicate 1221 | irishtimes 1222 | McWilliams 1223 | aljazeera 1224 | tufts 1225 | source 1226 | commemorations 1227 | morning 1228 | professor 1229 | International 1230 | Welle 1231 | complicated 1232 | climb 1233 | iNews 1234 | Irish 1235 | class 1236 | London 1237 | Gregg 1238 | enlisted 1239 | Rifle 1240 | Brigade 1241 | Brilliant 1242 | Thriller 1243 | caught 1244 | heart 1245 | Euroarts 1246 | Klang 1247 | Familie 1248 | Techno 1249 | Ebook 1250 | Memory 1251 | Making 1252 | controversial 1253 | drama 1254 | Downfall 1255 | unexpected 1256 | Division 1257 | photographs 1258 | Family 1259 | Courage 1260 | Survival 1261 | ordinary 1262 | really 1263 | Jahre 1264 | Calling 1265 | Anarchy 1266 | Birth 1267 | include 1268 | eBooks 1269 | document 1270 | brings 1271 | Collapse 1272 | reveals 1273 | party 1274 | lives 1275 | provides 1276 | celebrations 1277 | insight 1278 | members 1279 | covered 1280 | Foundation 1281 | doodles 1282 | roared 1283 | crowds 1284 | neoclassical 1285 | orders 1286 | Batavian 1287 | Pariser 1288 | hundred 1289 | sights 1290 | Located 1291 | architecture 1292 | binaries 1293 | asset 1294 | given 1295 | Allies 1296 | actors 1297 | tourist 1298 | transport 1299 | consists 1300 | painted 1301 | directly 1302 | remnant 1303 | Mhlenstrae 1304 | Friedrichshain 1305 | longest 1306 | Mhlenstrasse 1307 | artists 1308 | outdoor 1309 | Lonely 1310 | Planet 1311 | lonelyplanet 1312 | occurred 1313 | center 1314 | memory 1315 | museumsportal 1316 | remembrance 1317 | Juden 1318 | Europas 1319 | blocks 1320 | denkmal 1321 | district 1322 | edifice 1323 | registration 1324 | Homepage 1325 | bundestag 1326 | spectacular 1327 | Tickets 1328 | AllVideosImagesNews 1329 | WallEvent 1330 | shortly 1331 | afterwards 1332 | Kristallnacht 1333 | Jazeera 1334 | forgets 1335 | defector 1336 | Grossman 1337 | coverage 1338 | Economist 1339 | Drafting 1340 | Press 1341 | Immediate 1342 | response 1343 | Aftermath 1344 | senior 1345 | culminated 1346 | recent 1347 | partly 1348 | invisible 1349 | seismic 1350 | economy 1351 | AllShoppingImagesMaps 1352 | friendly 1353 | Trnenpalast 1354 | Hohenschnhausen 1355 | Wanns 1356 | extent 1357 | rarely 1358 | current 1359 | backdrop 1360 | overview 1361 | major 1362 | CityMetric 1363 | citymetric 1364 | horizons 1365 | quarter 1366 | rejoining 1367 | Cartographers 1368 | responded 1369 | different 1370 | expert 1371 | takes 1372 | glorious 1373 | Remains 1374 | remnants 1375 | hubfs 1376 | Imported 1377 | Media 1378 | external 1379 | preview 1380 | ueMlVVdjBS 1381 | ONMgjxpn 1382 | pinimg 1383 | originals 1384 | AllImagesVideosShopping 1385 | razing 1386 | science 1387 | engineering 1388 | safely 1389 | efficiently 1390 | tearing 1391 | structures 1392 | contrasts 1393 | deconstruction 1394 | involves 1395 | taking 1396 | apart 1397 | carefully 1398 | preserving 1399 | secret 1400 | immersed 1401 | themselves 1402 | officially 1403 | Premium 1404 | Reads 1405 | person 1406 | trying 1407 | cross 1408 | whose 1409 | instrumental 1410 | speech 1411 | front 1412 | challenging 1413 | counterpart 1414 | Mikhail 1415 | declaring 1416 | Their 1417 | threatened 1418 | destroy 1419 | viability 1420 | remembers 1421 | immediately 1422 | symbolically 1423 | gradually 1424 | photograph 1425 | taken 1426 | young 1427 | chipping 1428 | effective 1429 | Answer 1430 | secure 1431 | multimedia 1432 | newrepublic 1433 | kinja 1434 | gawker 1435 | media 1436 | historyconflicts 1437 | aANWjTQmPbs 1438 | AllImagesNewsVideos 1439 | encyclopediahttps 1440 | ensure 1441 | encroach 1442 | Generally 1443 | tunneller 1444 | recalls 1445 | troll 1446 | Trump 1447 | piece 1448 | Escape 1449 | opens 1450 | raged 1451 | become 1452 | WorldAtlas 1453 | worldatlas 1454 | simplified 1455 | explanation 1456 | motivations 1457 | behind 1458 | traveling 1459 | itself 1460 | Primary 1461 | Sources 1462 | archives 1463 | explored 1464 | acting 1465 | physical 1466 | symbolised 1467 | tunnellers 1468 | allow 1469 | dozens 1470 | escape 1471 | exposed 1472 | caused 1473 | Inner 1474 | wound 1475 | Landmark 1476 | depth 1477 | picture 1478 | alliance 1479 | Surrounded 1480 | kilometer 1481 | dream 1482 | Through 1483 | OTUxNTE 1484 | warhistoryonline 1485 | blogspot 1486 | WctALG 1487 | VcGBj 1488 | kmiYI 1489 | AAAAAAA 1490 | AllImagesMapsShopping 1491 | comhttps 1492 | Killing 1493 | Fechter 1494 | Figures 1495 | National 1496 | Curriculum 1497 | Schools 1498 | nationalcoldwarexhibition 1499 | colleges 1500 | figures 1501 | Total 1502 | amount 1503 | bustling 1504 | trams 1505 | running 1506 | whatever 1507 | exodus 1508 | regular 1509 | intervals 1510 | affairs 1511 | countries 1512 | AllMapsImagesShopping 1513 | Berlinhttps 1514 | usefulinfo 1515 | locations 1516 | Background 1517 | shaped 1518 | sight 1519 | portion 1520 | structure 1521 | southern 1522 | watchtower 1523 | offering 1524 | material 1525 | visitor 1526 | viewing 1527 | tower 1528 | Useful 1529 | Schler 1530 | matter 1531 | names 1532 | potsdamer 1533 | platz 1534 | sectors 1535 | despite 1536 | entirely 1537 | twelve 1538 | pillars 1539 | myguide 1540 | Washington 1541 | violence 1542 | inews 1543 | Decades 1544 | Anymore 1545 | Foreign 1546 | Policy 1547 | Popular 1548 | Peace 1549 | Solidarity 1550 | Dignity 1551 | Freedom 1552 | Unity 1553 | decisive 1554 | Simon 1555 | Coveney 1556 | simoncoveney 1557 | optimism 1558 | commission 1559 | Sassoli 1560 | reunited 1561 | ideas 1562 | Being 1563 | impressive 1564 | experiences 1565 | eptwitter 1566 | OAhCjF 1567 | Irina 1568 | Wiese 1569 | IrinavonWiese 1570 | fighting 1571 | virtual 1572 | Creative 1573 | creative 1574 | dialogue 1575 | cultural 1576 | exchange 1577 | borderless 1578 | society 1579 | rkfUfs 1580 | Erasmus 1581 | EUErasmusPlus 1582 | KzMGAR 1583 | Voorde 1584 | vdVoorde 1585 | minted 1586 | collapsed 1587 | transit 1588 | Gloria 1589 | mundi 1590 | lBENuEn 1591 | minute 1592 | Georg 1593 | Schmidt 1594 | GermanAmbTHA 1595 | Almost 1596 | thanks 1597 | colleagues 1598 | welcoming 1599 | TukTuk 1600 | service 1601 | afbkk 1602 | zYFVFb 1603 | signs 1604 | Tourist 1605 | unification 1606 | adopted 1607 | rules 1608 | temple 1609 | dance 1610 | music 1611 | corners 1612 | globe 1613 | ready 1614 | traces 1615 | comment 1616 | Browse 1617 | Luckily 1618 | giant 1619 | broken 1620 | virginia 1621 | usnews 1622 | USNEWS 1623 | iqjWHBFdfxIU 1624 | iSEHMVJel 1625 | AllImagesNewsShopping 1626 | HISTORYhttps 1627 | crossings 1628 | Communist 1629 | Soviets 1630 | ThoughtCo 1631 | Century 1632 | disaffected 1633 | Explained 1634 | Teachers 1635 | workbook 1636 | Facebook 1637 | oppressive 1638 | Monetization 1639 | expand 1640 | Overview 1641 | Success 1642 | Stories 1643 | Resources 1644 | smart 1645 | Feature 1646 | Spotlight 1647 | Rewarded 1648 | Reward 1649 | rewards 1650 | avatars 1651 | levels 1652 | engaging 1653 | change 1654 | incentives 1655 | updating 1656 | rewarded 1657 | mediation 1658 | dynamically 1659 | highest 1660 | yielding 1661 | every 1662 | Native 1663 | Simply 1664 | template 1665 | customise 1666 | match 1667 | implement 1668 | changes 1669 | publishing 1670 | trusted 1671 | worldwide 1672 | partners 1673 | engagement 1674 | etisers 1675 | featuring 1676 | sized 1677 | Developer 1678 | Interview 1679 | Series 1680 | Enjoy 1681 | short 1682 | advice 1683 | AdWords 1684 | advertising 1685 | platforms 1686 | customised 1687 | developer 1688 | receive 1689 | extra 1690 | resources 1691 | Forum 1692 | herocraft 1693 | fingersoft 1694 | picsart 1695 | colopl 1696 | playmore 1697 | cocos 1698 | Management 1699 | Software 1700 | Money 1701 | number 1702 | Start 1703 | visits 1704 | calls 1705 | beyond 1706 | minimum 1707 | required 1708 | variety 1709 | global 1710 | experts 1711 | Expert 1712 | invest 1713 | Calls 1714 | landlines 1715 | charges 1716 | apply 1717 | another 1718 | company 1719 | abroad 1720 | subject 1721 | qualification 1722 | Brothers 1723 | ground 1724 | interested 1725 | shoppers 1726 | attract 1727 | machine 1728 | learning 1729 | includes 1730 | collaboration 1731 | scalable 1732 | infrastructure 1733 | custom 1734 | email 1735 | yourcompany 1736 | productivity 1737 | Hosting 1738 | hosting 1739 | optimised 1740 | reliable 1741 | performance 1742 | Storage 1743 | Securely 1744 | There 1745 | hardware 1746 | Connect 1747 | analyse 1748 | multiple 1749 | sources 1750 | behaviour 1751 | someone 1752 | clicks 1753 | Content 1754 | creators 1755 | placing 1756 | Analyse 1757 | monetise 1758 | enough 1759 | loading 1760 | yours 1761 | faster 1762 | performing 1763 | improve 1764 | Studio 1765 | Empower 1766 | everyone 1767 | Master 1768 | digital 1769 | training 1770 | Inventory 1771 | Domains 1772 | Learning 1773 | Products 1774 | Directory 1775 | Retail 1776 | Melayu 1777 | Català 1778 | Espanya 1779 | Čeština 1780 | Česká 1781 | republika 1782 | Dansk 1783 | Danmark 1784 | Österreich 1785 | Schweiz 1786 | Estados 1787 | Unidos 1788 | México 1789 | Panamá 1790 | República 1791 | Dominicana 1792 | Pilipinas 1793 | Algérie 1794 | Belgique 1795 | Suisse 1796 | Tunisie 1797 | Hrvatski 1798 | Hrvatska 1799 | Latviešu 1800 | Latvija 1801 | Lietuvių 1802 | Lietuva 1803 | Magyar 1804 | Magyarország 1805 | België 1806 | Nederland 1807 | Norsk 1808 | Norge 1809 | Republica 1810 | România 1811 | Slovenčina 1812 | Slovensko 1813 | Slovenščina 1814 | Slovenija 1815 | Svenska 1816 | Sverige 1817 | Ελληνικά 1818 | Ελλάδα 1819 | Български 1820 | България 1821 | Беларусь 1822 | Казахстан 1823 | Српски 1824 | Србија 1825 | Українська 1826 | Україна 1827 | עברית 1828 | ישראל 1829 | الجزائر 1830 | المملكة 1831 | السعودية 1832 | scroll 1833 | smartphone 1834 | black 1835 | privacy 1836 | existed 1837 | Large 1838 | Black 1839 | white 1840 | Transparent 1841 | license 1842 | drawing 1843 | Animated 1844 | Reset 1845 | comWhat 1846 | comWatching 1847 | orgWhy 1848 | Build 1849 | Walls 1850 | comPictures 1851 | comAll 1852 | orgThe 1853 | Nationalism 1854 | comDavid 1855 | orgFall 1856 | ieBooks 1857 | comHow 1858 | eduThe 1859 | Complicated 1860 | Tufts 1861 | searchSearch 1862 | Closed 1863 | captioned 1864 | euphoria 1865 | Point 1866 | Subscribe 1867 | channel 1868 | confirmation 1869 | Opinion 1870 | pleitgen 1871 | routine 1872 | press 1873 | Become 1874 | Blogs 1875 | Recent 1876 | shaken 1877 | Instead 1878 | holding 1879 | talks 1880 | America 1881 | CNNThe 1882 | TimesCNN 1883 | personal 1884 | refer 1885 | WelleA 1886 | Moscow 1887 | TimesDecades 1888 | NBCNews 1889 | comChatham 1890 | helping 1891 | documented 1892 | either 1893 | communities 1894 | becoming 1895 | declaration 1896 | Hasselhoff 1897 | Strange 1898 | Connection 1899 | Mental 1900 | Floss 1901 | bunkers 1902 | unbelievable 1903 | GermanyI 1904 | GuardianPictures 1905 | NewsroundBrookings 1906 | Institution 1907 | Forces 1908 | winner 1909 | widely 1910 | beneficiaries 1911 | Seemed 1912 | Victory 1913 | George 1914 | Conversation 1915 | placement 1916 | determined 1917 | automatically 1918 | computer 1919 | program 1920 | displayed 1921 | reflects 1922 | added 1923 | searchRSS 1924 | items 1925 | Price 1926 | Seller 1927 | OnBuy 1928 | Wordery 1929 | AbeBooks 1930 | Sponsored 1931 | TWENTIETH 1932 | ANNIVERSARY 1933 | MICHAEL 1934 | MEYER 1935 | PROVIDES 1936 | RIVETING 1937 | EYEWITNESS 1938 | ACCOUNT 1939 | COLLAPSE 1940 | COMMUNISM 1941 | nineteen 1942 | switchback 1943 | roller 1944 | coaster 1945 | legendary 1946 | already 1947 | Trabant 1948 | tribute 1949 | appearance 1950 | hastily 1951 | entanglement 1952 | unleashed 1953 | democratisation 1954 | shops 1955 | accounts 1956 | written 1957 | footnotes 1958 | disused 1959 | spaces 1960 | abandoned 1961 | waiting 1962 | filled 1963 | unclear 1964 | Reporters 1965 | Drawing 1966 | extensive 1967 | range 1968 | archival 1969 | describing 1970 | WallThirty 1971 | bringing 1972 | sudden 1973 | seeing 1974 | Communism 1975 | wealth 1976 | documents 1977 | Willner 1978 | recounts 1979 | generations 1980 | mothers 1981 | sisters 1982 | daughters 1983 | cousins 1984 | Audible 1985 | action 1986 | illuminating 1987 | showed 1988 | again 1989 | women 1990 | Title 1991 | Product 1992 | Subjects 1993 | Redbubble 1994 | Poster 1995 | Additional 1996 | sizes 1997 | Celebrate 1998 | awesome 1999 | shirt 2000 | exhilarating 2001 | journey 2002 | subcultures 2003 | squats 2004 | anarchic 2005 | compensated 2006 | merchants 2007 | Payment 2008 | several 2009 | factors 2010 | Prices 2011 | shown 2012 | applicable 2013 | Shipping 2014 | costs 2015 | depending 2016 | destination 2017 | shipping 2018 | method 2019 | selected 2020 | bDownfall 2021 | AllImagesVideosBooks 2022 | Preview 2023 | Magazines 2024 | Newspapers 2025 | Revolutionary 2026 | leading 2027 | fresh 2028 | leaders 2029 | centers 2030 | Union 2031 | viewed 2032 | Accidental 2033 | Opening 2034 | prize 2035 | winning 2036 | historian 2037 | Elise 2038 | Sarotte 2039 | perfect 2040 | storm 2041 | daring 2042 | underground 2043 | revolutionaries 2044 | disgruntled 2045 | officers 2046 | dictatorial 2047 | bosses 2048 | renowned 2049 | author 2050 | conservative 2051 | pioneer 2052 | Buckley 2053 | explains 2054 | devastating 2055 | sides 2056 | riveting 2057 | resoluteness 2058 | empire 2059 | knees 2060 | Michael 2061 | Meyer 2062 | extraordinarily 2063 | revolutions 2064 | roiled 2065 | differ 2066 | Within 2067 | remained 2068 | sections 2069 | preserved 2070 | cause 2071 | cheering 2072 | period 2073 | misery 2074 | Beyond 2075 | Twenty 2076 | presents 2077 | conceptual 2078 | paradox 2079 | sought 2080 | erase 2081 | haunts 2082 | imagination 2083 | complex 2084 | often 2085 | Transitions 2086 | Complete 2087 | timeline 2088 | ideal 2089 | study 2090 | amazingly 2091 | insightful 2092 | entertaining 2093 | Millar 2094 | characteristic 2095 | significant 2096 | Frontiers 2097 | Power 2098 | Patrick 2099 | Major 2100 | explores 2101 | closure 2102 | affected 2103 | farmers 2104 | teenagers 2105 | Thirteenth 2106 | russia 2107 | Vladimir 2108 | Yakunin 2109 | Railways 2110 | leaned 2111 | forward 2112 | describe 2113 | going 2114 | island 2115 | Rhodes 2116 | summit 2117 | chance 2118 | allies 2119 | compare 2120 | notes 2121 | assess 2122 | opportunities 2123 | plans 2124 | MaltaToday 2125 | maltatoday 2126 | believed 2127 | irreperable 2128 | extremism 2129 | abcnews 2130 | watched 2131 | climbed 2132 | newfound 2133 | transformation 2134 | proof 2135 | overcome 2136 | conflict 2137 | fight 2138 | against 2139 | injustice 2140 | doesn 2141 | PHOTOS 2142 | Yahoo 2143 | yahoo 2144 | celebrate 2145 | hundreds 2146 | Beate 2147 | Martin 2148 | Divisions 2149 | japantimes 2150 | ushered 2151 | allia 2152 | livestream 2153 | organized 2154 | Konrad 2155 | Adenauer 2156 | Institute 2157 | anything 2158 | Coffee 2159 | Spectator 2160 | guest 2161 | artist 2162 | factory 2163 | profoundly 2164 | trend 2165 | watching 2166 | Jenny 2167 | Erpenbeck 2168 | currently 2169 | recognize 2170 | ideological 2171 | towards 2172 | rallies 2173 | exhibitions 2174 | Leaders 2175 | restoration 2176 | order 2177 | early 2178 | temporarily 2179 | Havel 2180 | Quadriga 2181 | Architectural 2182 | Neoclassical 2183 | Architect 2184 | Gotthard 2185 | Langhans 2186 | monuments 2187 | vibrant 2188 | surviving 2189 | brief 2190 | entry 2191 | topped 2192 | Returns 2193 | Bronze 2194 | statue 2195 | installed 2196 | never 2197 | little 2198 | military 2199 | symbolize 2200 | peace 2201 | gateway 2202 | remaining 2203 | standing 2204 | avenue 2205 | Unter 2206 | Linden 2207 | reign 2208 | Friedrich 2209 | Wilhelm 2210 | aviewoncities 2211 | brandenburgertor 2212 | quadriga 2213 | kaliningrad 2214 | bombed 2215 | Brandenbur 2216 | AllImagesMapsVideos 2217 | Friedrichstrae 2218 | Bravo 2219 | Crisis 2220 | Points 2221 | Mighty 2222 | MacGregor 2223 | vivid 2224 | Disneyfication 2225 | concerns 2226 | bloodbath 2227 | harassment 2228 | claims 2229 | landmarks 2230 | Authorities 2231 | wearing 2232 | uniforms 2233 | Visiting 2234 | Musuem 2235 | worth 2236 | analysis 2237 | While 2238 | getaway 2239 | group 2240 | infamous 2241 | Should 2242 | check 2243 | movie 2244 | passport 2245 | stamp 2246 | welcomecard 2247 | getyourguide 2248 | Kreuzberg 2249 | status 2250 | heritage 2251 | protected 2252 | Experience 2253 | Description 2254 | Remediation 2255 | Artists 2256 | Established 2257 | eastsidegallery 2258 | offizielle 2259 | Webseite 2260 | Erstmals 2261 | exklusiv 2262 | gesamte 2263 | Geschichte 2264 | lngste 2265 | erhaltene 2266 | urban 2267 | walks 2268 | excellent 2269 | venue 2270 | voice 2271 | express 2272 | viewpoints 2273 | concocted 2274 | Grafitti 2275 | dismantled 2276 | paralleling 2277 | Spree 2278 | stretch 2279 | eastsidegalleryberlin 2280 | overcoming 2281 | testimony 2282 | regime 2283 | Exploring 2284 | profound 2285 | Monument 2286 | State 2287 | WELCOME 2288 | Visitor 2289 | Services 2290 | situation 2291 | explain 2292 | partition 2293 | commemorative 2294 | recalling 2295 | fraught 2296 | einfuehrung 2297 | Welcome 2298 | dedicated 2299 | Museumsportal 2300 | gedenkstatte 2301 | documentation 2302 | victims 2303 | designed 2304 | architect 2305 | Eisenman 2306 | engineer 2307 | Happold 2308 | Mahnmal 2309 | Interpretations 2310 | Place 2311 | Public 2312 | reception 2313 | Inadequacy 2314 | newyorker 2315 | culture 2316 | richard 2317 | brody 2318 | inadequacy 2319 | south 2320 | thousand 2321 | seven 2322 | eleven 2323 | slabs 2324 | stelae 2325 | question 2326 | Ermordeten 2327 | level 2328 | seemingly 2329 | disappear 2330 | Atlas 2331 | atlasobscura 2332 | December 2333 | killed 2334 | Stiftung 2335 | stiftung 2336 | murde 2337 | honouring 2338 | remembering 2339 | museums 2340 | ermor 2341 | ermordeten 2342 | Close 2343 | field 2344 | Tablet 2345 | tabletmag 2346 | hashoah 2347 | information 2348 | price 2349 | selfies 2350 | mahnmal 2351 | auschwitz 2352 | Edifice 2353 | housed 2354 | severely 2355 | damaged 2356 | Republik 2357 | Category 2358 | Kroll 2359 | Opera 2360 | Renovated 2361 | Country 2362 | daily 2363 | midnight 2364 | admission 2365 | Online 2366 | Berlins 2367 | Registering 2368 | visittheBundestag 2369 | terrace 2370 | views 2371 | parliamentary 2372 | establishment 2373 | Reich 2374 | looked 2375 | unfortunately 2376 | fully 2377 | booked 2378 | arrival 2379 | guaranteed 2380 | reservations 2381 | otherwise 2382 | scoring 2383 | Visitors 2384 | Bring 2385 | meeting 2386 | Assembly 2387 | lower 2388 | legislature 2389 | details 2390 | difficult 2391 | obtain 2392 | Liberation 2393 | Route 2394 | liberationroute 2395 | spots 2396 | Weimar 2397 | restaurant 2398 | pronunciation 2399 | private 2400 | Finished 2401 | dramatic 2402 | setting 2403 | stage 2404 | Nationwide 2405 | kicked 2406 | Frank 2407 | Walter 2408 | Steinmeier 2409 | dealing 2410 | Peaceful 2411 | Approaching 2412 | Economic 2413 | Festival 2414 | England 2415 | impacted 2416 | -------------------------------------------------------------------------------- /cewl_wordlists/demo.cewl-wordlist.txt: -------------------------------------------------------------------------------- 1 | demo 2 | -------------------------------------------------------------------------------- /cewl_wordlists/md5.hash.cewl-list.txt: -------------------------------------------------------------------------------- 1 | Google 2 | AdMob 3 | arrow 4 | Search 5 | English 6 | newsCtrl 7 | posts 8 | Español 9 | Latinoamérica 10 | results 11 | YouTube 12 | Islands 13 | title 14 | Scale 15 | Business 16 | advertisers 17 | Settings 18 | United 19 | mobile 20 | العربية 21 | related 22 | Improve 23 | Analytics 24 | Gmail 25 | SafeSearch 26 | business 27 | experience 28 | developers 29 | these 30 | Advertise 31 | video 32 | Drive 33 | tools 34 | cookies 35 | Kingdom 36 | pages 37 | website 38 | Cloud 39 | Français 40 | billion 41 | Since 42 | search 43 | words 44 | Indonesia 45 | published 46 | users 47 | Images 48 | History 49 | Privacy 50 | Terms 51 | language 52 | region 53 | Measure 54 | money 55 | solutions 56 | started 57 | Brasil 58 | Watch 59 | Latest 60 | mediumDate 61 | snippet 62 | consultation 63 | Advanced 64 | helps 65 | content 66 | Calendar 67 | numbers 68 | South 69 | month 70 | Solutions 71 | Learn 72 | Campaigns 73 | Platform 74 | manage 75 | Deutsch 76 | Русский 77 | preferences 78 | enable 79 | browser 80 | moreShow 81 | explicit 82 | customisation 83 | google 84 | French 85 | Guinea 86 | France 87 | share 88 | phone 89 | learn 90 | Display 91 | Network 92 | their 93 | Suite 94 | AdSense 95 | Bahasa 96 | Português 97 | Twitter 98 | Looking 99 | millions 100 | access 101 | programmatic 102 | demand 103 | Mediation 104 | networks 105 | native 106 | preserve 107 | innovative 108 | engaged 109 | Choose 110 | formats 111 | unlimited 112 | analytics 113 | Firebase 114 | house 115 | deals 116 | without 117 | million 118 | Using 119 | increase 120 | Global 121 | requests 122 | specialists 123 | total 124 | downloads 125 | Request 126 | searchLanguage 127 | AdvertisingProgrammesBusiness 128 | SolutionsAbout 129 | GoogleGoogle 130 | products 131 | filter 132 | relevant 133 | settings 134 | HelpPrivacyTerms 135 | Island 136 | Canada 137 | Malaysia 138 | Portugal 139 | terms 140 | Microsoft 141 | Stanfords 142 | spend 143 | websites 144 | available 145 | Shopping 146 | Universal 147 | Promote 148 | credit 149 | better 150 | promote 151 | platform 152 | insights 153 | Android 154 | Mobile 155 | Follow 156 | Centre 157 | Change 158 | Deutschland 159 | España 160 | Italiano 161 | Italia 162 | Polski 163 | Polska 164 | Tiếng 165 | Türkçe 166 | Türkiye 167 | Россия 168 | الإمارات 169 | المتحدة 170 | saved 171 | disabled 172 | Setting 173 | until 174 | Languages 175 | Which 176 | should 177 | Currently 178 | showing 179 | EnglishEdit 180 | Filters 181 | block 182 | inappropriate 183 | images 184 | accurate 185 | avoid 186 | violent 187 | adult 188 | Results 189 | Faster 190 | Slower 191 | Instant 192 | shows 193 | Where 194 | activity 195 | recommendations 196 | using 197 | searches 198 | Region 199 | retain 200 | terrier 201 | exact 202 | between 203 | Chinese 204 | Filipino 205 | Samoa 206 | Argentina 207 | Australia 208 | Bolivia 209 | British 210 | Virgin 211 | Republic 212 | Chile 213 | Colombia 214 | Congo 215 | Costa 216 | Cyprus 217 | Ecuador 218 | Egypt 219 | Salvador 220 | Georgia 221 | Guatemala 222 | Honduras 223 | India 224 | Ireland 225 | Moldova 226 | Zealand 227 | Nicaragua 228 | Nigeria 229 | North 230 | Korea 231 | Pakistan 232 | Paraguay 233 | Philippines 234 | Puerto 235 | Saudi 236 | Arabia 237 | Singapore 238 | Africa 239 | Lanka 240 | Emirates 241 | States 242 | Uruguay 243 | Venezuela 244 | hours 245 | domain 246 | links 247 | format 248 | Adobe 249 | Earth 250 | commercially 251 | modify 252 | popular 253 | Support 254 | stories 255 | customers 256 | store 257 | understand 258 | passion 259 | profit 260 | Digital 261 | Garage 262 | Chrome 263 | Enterprise 264 | Manager 265 | Developers 266 | Eesti 267 | Nederlands 268 | Română 269 | Suomi 270 | background 271 | Blogger 272 | https 273 | policies 274 | Monetization 275 | Advertising 276 | expand 277 | Overview 278 | Success 279 | Stories 280 | Resources 281 | smart 282 | Feature 283 | Spotlight 284 | Rewarded 285 | Video 286 | Reward 287 | rewards 288 | points 289 | currency 290 | avatars 291 | levels 292 | engaging 293 | change 294 | incentives 295 | updating 296 | rewarded 297 | mediation 298 | dynamically 299 | highest 300 | yielding 301 | every 302 | Native 303 | Simply 304 | template 305 | customise 306 | match 307 | implement 308 | style 309 | changes 310 | publishing 311 | trusted 312 | other 313 | worldwide 314 | including 315 | partners 316 | engagement 317 | etisers 318 | series 319 | featuring 320 | sized 321 | Developer 322 | Interview 323 | Series 324 | Enjoy 325 | short 326 | videos 327 | advice 328 | successful 329 | AdWords 330 | across 331 | advertising 332 | platforms 333 | customised 334 | developer 335 | could 336 | receive 337 | extra 338 | resources 339 | Forum 340 | About 341 | herocraft 342 | fingersoft 343 | picsart 344 | colopl 345 | playmore 346 | unity 347 | cocos 348 | important 349 | colour 350 | phrase 351 | quotes 352 | miniature 353 | standard 354 | minus 355 | before 356 | rodent 357 | Russell 358 | ranging 359 | stops 360 | measurement 361 | narrow 362 | Afrikaans 363 | Arabic 364 | Armenian 365 | Belarusian 366 | Bulgarian 367 | Catalan 368 | Simplified 369 | Traditional 370 | Croatian 371 | Czech 372 | Danish 373 | Dutch 374 | Esperanto 375 | Estonian 376 | Finnish 377 | German 378 | Greek 379 | Hebrew 380 | Hindi 381 | Hungarian 382 | Icelandic 383 | Indonesian 384 | Italian 385 | Japanese 386 | Korean 387 | Latvian 388 | Lithuanian 389 | Norwegian 390 | Persian 391 | Polish 392 | Portuguese 393 | Romanian 394 | Russian 395 | Serbian 396 | Slovak 397 | Slovenian 398 | Spanish 399 | Swahili 400 | Swedish 401 | Turkish 402 | Ukrainian 403 | Vietnamese 404 | select 405 | Afghanistan 406 | Albania 407 | Algeria 408 | American 409 | Andorra 410 | Angola 411 | Anguilla 412 | Antarctica 413 | Antigua 414 | Barbuda 415 | Armenia 416 | Aruba 417 | Austria 418 | Azerbaijan 419 | Bahamas 420 | Bahrain 421 | Bangladesh 422 | Barbados 423 | Belarus 424 | Belgium 425 | Belize 426 | Benin 427 | Bermuda 428 | Bhutan 429 | Bosnia 430 | Herzegovina 431 | Botswana 432 | Bouvet 433 | Brazil 434 | Indian 435 | Ocean 436 | Territory 437 | Brunei 438 | Bulgaria 439 | Burkina 440 | Burundi 441 | Cambodia 442 | Cameroon 443 | Verde 444 | Cayman 445 | Central 446 | African 447 | China 448 | Christmas 449 | Cocos 450 | Keeling 451 | Comoros 452 | Brazzaville 453 | Kinshasa 454 | Ivoire 455 | Croatia 456 | Czechia 457 | Denmark 458 | Djibouti 459 | Dominica 460 | Dominican 461 | Equatorial 462 | Eritrea 463 | Estonia 464 | Eswatini 465 | Ethiopia 466 | Falkland 467 | Islas 468 | Malvinas 469 | Faroe 470 | Finland 471 | Guiana 472 | Polynesia 473 | Southern 474 | Territories 475 | Gabon 476 | Gambia 477 | Germany 478 | Ghana 479 | Gibraltar 480 | Greece 481 | Greenland 482 | Grenada 483 | Guadeloupe 484 | Bissau 485 | Guyana 486 | Haiti 487 | Heard 488 | McDonald 489 | Hungary 490 | Iceland 491 | Israel 492 | Italy 493 | Jamaica 494 | Japan 495 | Jordan 496 | Kazakhstan 497 | Kenya 498 | Kiribati 499 | Kuwait 500 | Kyrgyzstan 501 | Latvia 502 | Lebanon 503 | Lesotho 504 | Liberia 505 | Libya 506 | Liechtenstein 507 | Lithuania 508 | Luxembourg 509 | Macao 510 | Madagascar 511 | Malawi 512 | Maldives 513 | Malta 514 | Marshall 515 | Martinique 516 | Mauritania 517 | Mauritius 518 | Mayotte 519 | Mexico 520 | Micronesia 521 | Monaco 522 | Mongolia 523 | Montserrat 524 | Morocco 525 | Mozambique 526 | Myanmar 527 | Burma 528 | Namibia 529 | Nauru 530 | Nepal 531 | Netherlands 532 | Caledonia 533 | Niger 534 | Norfolk 535 | Macedonia 536 | Northern 537 | Mariana 538 | Norway 539 | Palau 540 | Palestine 541 | Panama 542 | Papua 543 | Pitcairn 544 | Poland 545 | Qatar 546 | Runion 547 | Romania 548 | Russia 549 | Rwanda 550 | Marino 551 | Prncipe 552 | Senegal 553 | Serbia 554 | Seychelles 555 | Sierra 556 | Leone 557 | Slovakia 558 | Slovenia 559 | Solomon 560 | Somalia 561 | Sandwich 562 | Spain 563 | Helena 564 | Kitts 565 | Nevis 566 | Lucia 567 | Pierre 568 | Miquelon 569 | Vincent 570 | Grenadines 571 | Sudan 572 | Suriname 573 | Svalbard 574 | Mayen 575 | Sweden 576 | Switzerland 577 | Syria 578 | Taiwan 579 | Tajikistan 580 | Tanzania 581 | Thailand 582 | Tokelau 583 | Tonga 584 | Trinidad 585 | Tobago 586 | Tunisia 587 | Turkey 588 | Turkmenistan 589 | Turks 590 | Caicos 591 | Tuvalu 592 | Outlying 593 | Uganda 594 | Ukraine 595 | Uzbekistan 596 | Vanuatu 597 | Vatican 598 | Vietnam 599 | Wallis 600 | Futuna 601 | Western 602 | Sahara 603 | Yemen 604 | Zambia 605 | Zimbabwe 606 | particular 607 | update 608 | anytime 609 | updated 610 | within 611 | specify 612 | wikipedia 613 | limit 614 | appearing 615 | anywhere 616 | whole 617 | address 618 | looking 619 | Filter 620 | whether 621 | sexually 622 | Acrobat 623 | Postscript 624 | Autodesk 625 | Excel 626 | PowerPoint 627 | Format 628 | Shockwave 629 | Flash 630 | prefer 631 | usage 632 | rights 633 | filtered 634 | licence 635 | yourself 636 | similar 637 | visited 638 | operators 639 | Customise 640 | Management 641 | Software 642 | Money 643 | Website 644 | opening 645 | number 646 | directions 647 | Start 648 | visits 649 | calls 650 | beyond 651 | minimum 652 | required 653 | place 654 | variety 655 | local 656 | global 657 | experts 658 | Expert 659 | support 660 | invest 661 | Calls 662 | landlines 663 | charges 664 | apply 665 | another 666 | company 667 | abroad 668 | based 669 | subject 670 | qualification 671 | House 672 | Brothers 673 | built 674 | ground 675 | people 676 | right 677 | things 678 | offer 679 | interested 680 | shoppers 681 | attract 682 | machine 683 | learning 684 | includes 685 | collaboration 686 | scalable 687 | infrastructure 688 | custom 689 | email 690 | yourcompany 691 | productivity 692 | Hosting 693 | online 694 | hosting 695 | optimised 696 | reliable 697 | performance 698 | Storage 699 | Securely 700 | There 701 | hardware 702 | Connect 703 | analyse 704 | multiple 705 | sources 706 | behaviour 707 | someone 708 | clicks 709 | Content 710 | creators 711 | around 712 | world 713 | placing 714 | Analyse 715 | monetise 716 | enough 717 | sites 718 | visitors 719 | while 720 | loading 721 | yours 722 | faster 723 | performing 724 | working 725 | improve 726 | small 727 | Studio 728 | Empower 729 | everyone 730 | decisions 731 | Master 732 | digital 733 | training 734 | Explore 735 | Local 736 | Inventory 737 | Domains 738 | Learning 739 | Related 740 | Products 741 | Directory 742 | Retail 743 | Melayu 744 | Català 745 | Espanya 746 | Čeština 747 | Česká 748 | republika 749 | Dansk 750 | Danmark 751 | Österreich 752 | Schweiz 753 | Estados 754 | Unidos 755 | México 756 | Panamá 757 | República 758 | Dominicana 759 | Pilipinas 760 | Algérie 761 | Belgique 762 | Suisse 763 | Tunisie 764 | Hrvatski 765 | Hrvatska 766 | Latviešu 767 | Latvija 768 | Lietuvių 769 | Lietuva 770 | Magyar 771 | Magyarország 772 | België 773 | Nederland 774 | Norsk 775 | Norge 776 | Republica 777 | România 778 | Slovenčina 779 | Slovensko 780 | Slovenščina 781 | Slovenija 782 | Svenska 783 | Sverige 784 | Ελληνικά 785 | Ελλάδα 786 | Български 787 | България 788 | Беларусь 789 | Казахстан 790 | Српски 791 | Србија 792 | Українська 793 | Україна 794 | עברית 795 | ישראל 796 | الجزائر 797 | المملكة 798 | السعودية 799 | scroll 800 | smartphone 801 | black 802 | privacy 803 | -------------------------------------------------------------------------------- /cewl_wordlists/md5.hash.cewl-wordlist.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sp00ks-git/hat/718d7c4a0ae0197843d5ef52bb0bfdd79c11cd39/cewl_wordlists/md5.hash.cewl-wordlist.txt -------------------------------------------------------------------------------- /hash_upload/Net-NTLMv1.hash: -------------------------------------------------------------------------------- 1 | ::5V4T:ada06359242920a500000000000000000000000000000000:0556d5297b5daa70eaffde82ef99293a3f3bb59b7c9704ea:9c23f6c094853920 2 | -------------------------------------------------------------------------------- /hash_upload/Net-NTLMv2.hash: -------------------------------------------------------------------------------- 1 | 0UL5G37JOI0SX::6VB1IS0KA74:ebe1afa18b7fbfa6:aab8bf8675658dd2a939458a1077ba08:010100000000000031c8aa092510945398b9f7b7dde1a9fb00000000f7876f2b04b700 2 | -------------------------------------------------------------------------------- /hash_upload/kerberos.hash: -------------------------------------------------------------------------------- 1 | $krb5tgs$23$*user$realm$test/spn*$b548e10f5694ae018d7ad63c257af7dc$35e8e45658860bc31a859b41a08989265f4ef8afd75652ab4d7a30ef151bf6350d879ae189a8cb769e01fa573c6315232b37e4bcad9105520640a781e5fd85c09615e78267e494f433f067cc6958200a82f70627ce0eebc2ac445729c2a8a0255dc3ede2c4973d2d93ac8c1a56b26444df300cb93045d05ff2326affaa3ae97f5cd866c14b78a459f0933a550e0b6507bf8af27c2391ef69fbdd649dd059a4b9ae2440edd96c82479645ccdb06bae0eead3b7f639178a90cf24d9a -------------------------------------------------------------------------------- /hash_upload/kerberos.hash_users: -------------------------------------------------------------------------------- 1 | $krb5tgs$23$*user$realm$test/spn*$b548e10f5694ae018d7ad63c257af7dc$35e8e45658860bc31a859b41a08989265f4ef8afd75652ab4d7a30ef151bf6350d879ae189a8cb769e01fa573c6315232b37e4bcad9105520640a781e5fd85c09615e78267e494f433f067cc6958200a82f70627ce0eebc2ac445729c2a8a0255dc3ede2c4973d2d93ac8c1a56b26444df300cb93045d05ff2326affaa3ae97f5cd866c14b78a459f0933a550e0b6507bf8af27c2391ef69fbdd649dd059a4b9ae2440edd96c82479645ccdb06bae0eead3b7f639178a90cf24d9a 2 | -------------------------------------------------------------------------------- /hash_upload/md5.hash: -------------------------------------------------------------------------------- 1 | 8743b52063cd84097a65d1633f5c74f5 2 | -------------------------------------------------------------------------------- /hash_upload/md5.hash_users: -------------------------------------------------------------------------------- 1 | 8743b52063cd84097a65d1633f5c74f5 2 | -------------------------------------------------------------------------------- /l00t/example.pot.sorted: -------------------------------------------------------------------------------- 1 | some.domain\Anne.Example:cq335425e59414229e66279623ed5c58:example1 2 | some.domain\A.nother:8246f47ee7fb154ad047d830b7586c:Ex@mple2! 3 | some.domain\a.test:88w6f3324324234654367117ad06bdd830b7586c:n0tR3al 4 | some.domain\b.ready:21432432432432523532523fcdd5f61692c7c:f@ke! 5 | some.domain\b.ogus:71dsfsgsdfghdfhgfh05b266af3c42ec058c33:n0tMyp@55w0rd! 6 | some.domain\bo.gus:9543645676587658t654648288b7a6512719bf5b7:kids_name_1 7 | some.domain\change.me:885436534654787878987693625bdd830b7586c:Shitty_P@s5wOrd123! 8 | some.domain\example.account:3456345786890026546354764580ba6f8:Rand0m1981! 9 | -------------------------------------------------------------------------------- /l00t/md5.hash.pot: -------------------------------------------------------------------------------- 1 | 8743b52063cd84097a65d1633f5c74f5:hashcat 2 | -------------------------------------------------------------------------------- /rsmangler/input/out.test: -------------------------------------------------------------------------------- 1 | test 2 | -------------------------------------------------------------------------------- /rsmangler/input/test: -------------------------------------------------------------------------------- 1 | test 2 | -------------------------------------------------------------------------------- /rsmangler/input/testrun: -------------------------------------------------------------------------------- 1 | testrun 2 | -------------------------------------------------------------------------------- /rsmangler/output/out.test: -------------------------------------------------------------------------------- 1 | test 2 | -------------------------------------------------------------------------------- /rsmangler/output/testrun: -------------------------------------------------------------------------------- 1 | testrun 2 | t 3 | testruntestrun 4 | nurtset 5 | Testrun 6 | TESTRUN 7 | testruned 8 | testruning 9 | pwtestrun 10 | testrunpw 11 | pwdtestrun 12 | testrunpwd 13 | admintestrun 14 | testrunadmin 15 | systestrun 16 | testrunsys 17 | 73$7run 18 | 73z7run 19 | testrun! 20 | testrun@ 21 | testrun$ 22 | testrun% 23 | testrun^ 24 | testrun& 25 | testrun* 26 | testrun( 27 | testrun) 28 | 1990testrun 29 | testrun1990 30 | 1991testrun 31 | testrun1991 32 | 1992testrun 33 | testrun1992 34 | 1993testrun 35 | testrun1993 36 | 1994testrun 37 | testrun1994 38 | 1995testrun 39 | testrun1995 40 | 1996testrun 41 | testrun1996 42 | 1997testrun 43 | testrun1997 44 | 1998testrun 45 | testrun1998 46 | 1999testrun 47 | testrun1999 48 | 2000testrun 49 | testrun2000 50 | 2001testrun 51 | testrun2001 52 | 2002testrun 53 | testrun2002 54 | 2003testrun 55 | testrun2003 56 | 2004testrun 57 | testrun2004 58 | 2005testrun 59 | testrun2005 60 | 2006testrun 61 | testrun2006 62 | 2007testrun 63 | testrun2007 64 | 2008testrun 65 | testrun2008 66 | 2009testrun 67 | testrun2009 68 | 2010testrun 69 | testrun2010 70 | 2011testrun 71 | testrun2011 72 | 2012testrun 73 | testrun2012 74 | 2013testrun 75 | testrun2013 76 | 2014testrun 77 | testrun2014 78 | 2015testrun 79 | testrun2015 80 | 2016testrun 81 | testrun2016 82 | 2017testrun 83 | testrun2017 84 | 2018testrun 85 | testrun2018 86 | 2019testrun 87 | testrun2019 88 | 2020testrun 89 | testrun2020 90 | 01testrun 91 | testrun01 92 | 02testrun 93 | testrun02 94 | 03testrun 95 | testrun03 96 | 04testrun 97 | testrun04 98 | 05testrun 99 | testrun05 100 | 06testrun 101 | testrun06 102 | 07testrun 103 | testrun07 104 | 08testrun 105 | testrun08 106 | 09testrun 107 | testrun09 108 | 1testrun 109 | testrun1 110 | 2testrun 111 | testrun2 112 | 3testrun 113 | testrun3 114 | 4testrun 115 | testrun4 116 | 5testrun 117 | testrun5 118 | 6testrun 119 | testrun6 120 | 7testrun 121 | testrun7 122 | 8testrun 123 | testrun8 124 | 9testrun 125 | testrun9 126 | 10testrun 127 | testrun10 128 | 11testrun 129 | testrun11 130 | 12testrun 131 | testrun12 132 | 13testrun 133 | testrun13 134 | 14testrun 135 | testrun14 136 | 15testrun 137 | testrun15 138 | 16testrun 139 | testrun16 140 | 17testrun 141 | testrun17 142 | 18testrun 143 | testrun18 144 | 19testrun 145 | testrun19 146 | 20testrun 147 | testrun20 148 | 21testrun 149 | testrun21 150 | 22testrun 151 | testrun22 152 | 23testrun 153 | testrun23 154 | 24testrun 155 | testrun24 156 | 25testrun 157 | testrun25 158 | 26testrun 159 | testrun26 160 | 27testrun 161 | testrun27 162 | 28testrun 163 | testrun28 164 | 29testrun 165 | testrun29 166 | 30testrun 167 | testrun30 168 | 31testrun 169 | testrun31 170 | 32testrun 171 | testrun32 172 | 33testrun 173 | testrun33 174 | 34testrun 175 | testrun34 176 | 35testrun 177 | testrun35 178 | 36testrun 179 | testrun36 180 | 37testrun 181 | testrun37 182 | 38testrun 183 | testrun38 184 | 39testrun 185 | testrun39 186 | 40testrun 187 | testrun40 188 | 41testrun 189 | testrun41 190 | 42testrun 191 | testrun42 192 | 43testrun 193 | testrun43 194 | 44testrun 195 | testrun44 196 | 45testrun 197 | testrun45 198 | 46testrun 199 | testrun46 200 | 47testrun 201 | testrun47 202 | 48testrun 203 | testrun48 204 | 49testrun 205 | testrun49 206 | 50testrun 207 | testrun50 208 | 51testrun 209 | testrun51 210 | 52testrun 211 | testrun52 212 | 53testrun 213 | testrun53 214 | 54testrun 215 | testrun54 216 | 55testrun 217 | testrun55 218 | 56testrun 219 | testrun56 220 | 57testrun 221 | testrun57 222 | 58testrun 223 | testrun58 224 | 59testrun 225 | testrun59 226 | 60testrun 227 | testrun60 228 | 61testrun 229 | testrun61 230 | 62testrun 231 | testrun62 232 | 63testrun 233 | testrun63 234 | 64testrun 235 | testrun64 236 | 65testrun 237 | testrun65 238 | 66testrun 239 | testrun66 240 | 67testrun 241 | testrun67 242 | 68testrun 243 | testrun68 244 | 69testrun 245 | testrun69 246 | 70testrun 247 | testrun70 248 | 71testrun 249 | testrun71 250 | 72testrun 251 | testrun72 252 | 73testrun 253 | testrun73 254 | 74testrun 255 | testrun74 256 | 75testrun 257 | testrun75 258 | 76testrun 259 | testrun76 260 | 77testrun 261 | testrun77 262 | 78testrun 263 | testrun78 264 | 79testrun 265 | testrun79 266 | 80testrun 267 | testrun80 268 | 81testrun 269 | testrun81 270 | 82testrun 271 | testrun82 272 | 83testrun 273 | testrun83 274 | 84testrun 275 | testrun84 276 | 85testrun 277 | testrun85 278 | 86testrun 279 | testrun86 280 | 87testrun 281 | testrun87 282 | 88testrun 283 | testrun88 284 | 89testrun 285 | testrun89 286 | 90testrun 287 | testrun90 288 | 91testrun 289 | testrun91 290 | 92testrun 291 | testrun92 292 | 93testrun 293 | testrun93 294 | 94testrun 295 | testrun94 296 | 95testrun 297 | testrun95 298 | 96testrun 299 | testrun96 300 | 97testrun 301 | testrun97 302 | 98testrun 303 | testrun98 304 | 99testrun 305 | testrun99 306 | 100testrun 307 | testrun100 308 | 101testrun 309 | testrun101 310 | 102testrun 311 | testrun102 312 | 103testrun 313 | testrun103 314 | 104testrun 315 | testrun104 316 | 105testrun 317 | testrun105 318 | 106testrun 319 | testrun106 320 | 107testrun 321 | testrun107 322 | 108testrun 323 | testrun108 324 | 109testrun 325 | testrun109 326 | 110testrun 327 | testrun110 328 | 111testrun 329 | testrun111 330 | 112testrun 331 | testrun112 332 | 113testrun 333 | testrun113 334 | 114testrun 335 | testrun114 336 | 115testrun 337 | testrun115 338 | 116testrun 339 | testrun116 340 | 117testrun 341 | testrun117 342 | 118testrun 343 | testrun118 344 | 119testrun 345 | testrun119 346 | 120testrun 347 | testrun120 348 | 121testrun 349 | testrun121 350 | 122testrun 351 | testrun122 352 | 123testrun 353 | testrun123 354 | tt 355 | T 356 | ted 357 | ting 358 | pwt 359 | tpw 360 | pwdt 361 | tpwd 362 | admint 363 | tadmin 364 | syst 365 | tsys 366 | 7 367 | t! 368 | t@ 369 | t$ 370 | t% 371 | t^ 372 | t& 373 | t* 374 | t( 375 | t) 376 | 1990t 377 | t1990 378 | 1991t 379 | t1991 380 | 1992t 381 | t1992 382 | 1993t 383 | t1993 384 | 1994t 385 | t1994 386 | 1995t 387 | t1995 388 | 1996t 389 | t1996 390 | 1997t 391 | t1997 392 | 1998t 393 | t1998 394 | 1999t 395 | t1999 396 | 2000t 397 | t2000 398 | 2001t 399 | t2001 400 | 2002t 401 | t2002 402 | 2003t 403 | t2003 404 | 2004t 405 | t2004 406 | 2005t 407 | t2005 408 | 2006t 409 | t2006 410 | 2007t 411 | t2007 412 | 2008t 413 | t2008 414 | 2009t 415 | t2009 416 | 2010t 417 | t2010 418 | 2011t 419 | t2011 420 | 2012t 421 | t2012 422 | 2013t 423 | t2013 424 | 2014t 425 | t2014 426 | 2015t 427 | t2015 428 | 2016t 429 | t2016 430 | 2017t 431 | t2017 432 | 2018t 433 | t2018 434 | 2019t 435 | t2019 436 | 2020t 437 | t2020 438 | 01t 439 | t01 440 | 02t 441 | t02 442 | 03t 443 | t03 444 | 04t 445 | t04 446 | 05t 447 | t05 448 | 06t 449 | t06 450 | 07t 451 | t07 452 | 08t 453 | t08 454 | 09t 455 | t09 456 | 1t 457 | t1 458 | 2t 459 | t2 460 | 3t 461 | t3 462 | 4t 463 | t4 464 | 5t 465 | t5 466 | 6t 467 | t6 468 | 7t 469 | t7 470 | 8t 471 | t8 472 | 9t 473 | t9 474 | 10t 475 | t10 476 | 11t 477 | t11 478 | 12t 479 | t12 480 | 13t 481 | t13 482 | 14t 483 | t14 484 | 15t 485 | t15 486 | 16t 487 | t16 488 | 17t 489 | t17 490 | 18t 491 | t18 492 | 19t 493 | t19 494 | 20t 495 | t20 496 | 21t 497 | t21 498 | 22t 499 | t22 500 | 23t 501 | t23 502 | 24t 503 | t24 504 | 25t 505 | t25 506 | 26t 507 | t26 508 | 27t 509 | t27 510 | 28t 511 | t28 512 | 29t 513 | t29 514 | 30t 515 | t30 516 | 31t 517 | t31 518 | 32t 519 | t32 520 | 33t 521 | t33 522 | 34t 523 | t34 524 | 35t 525 | t35 526 | 36t 527 | t36 528 | 37t 529 | t37 530 | 38t 531 | t38 532 | 39t 533 | t39 534 | 40t 535 | t40 536 | 41t 537 | t41 538 | 42t 539 | t42 540 | 43t 541 | t43 542 | 44t 543 | t44 544 | 45t 545 | t45 546 | 46t 547 | t46 548 | 47t 549 | t47 550 | 48t 551 | t48 552 | 49t 553 | t49 554 | 50t 555 | t50 556 | 51t 557 | t51 558 | 52t 559 | t52 560 | 53t 561 | t53 562 | 54t 563 | t54 564 | 55t 565 | t55 566 | 56t 567 | t56 568 | 57t 569 | t57 570 | 58t 571 | t58 572 | 59t 573 | t59 574 | 60t 575 | t60 576 | 61t 577 | t61 578 | 62t 579 | t62 580 | 63t 581 | t63 582 | 64t 583 | t64 584 | 65t 585 | t65 586 | 66t 587 | t66 588 | 67t 589 | t67 590 | 68t 591 | t68 592 | 69t 593 | t69 594 | 70t 595 | t70 596 | 71t 597 | t71 598 | 72t 599 | t72 600 | 73t 601 | t73 602 | 74t 603 | t74 604 | 75t 605 | t75 606 | 76t 607 | t76 608 | 77t 609 | t77 610 | 78t 611 | t78 612 | 79t 613 | t79 614 | 80t 615 | t80 616 | 81t 617 | t81 618 | 82t 619 | t82 620 | 83t 621 | t83 622 | 84t 623 | t84 624 | 85t 625 | t85 626 | 86t 627 | t86 628 | 87t 629 | t87 630 | 88t 631 | t88 632 | 89t 633 | t89 634 | 90t 635 | t90 636 | 91t 637 | t91 638 | 92t 639 | t92 640 | 93t 641 | t93 642 | 94t 643 | t94 644 | 95t 645 | t95 646 | 96t 647 | t96 648 | 97t 649 | t97 650 | 98t 651 | t98 652 | 99t 653 | t99 654 | 100t 655 | t100 656 | 101t 657 | t101 658 | 102t 659 | t102 660 | 103t 661 | t103 662 | 104t 663 | t104 664 | 105t 665 | t105 666 | 106t 667 | t106 668 | 107t 669 | t107 670 | 108t 671 | t108 672 | 109t 673 | t109 674 | 110t 675 | t110 676 | 111t 677 | t111 678 | 112t 679 | t112 680 | 113t 681 | t113 682 | 114t 683 | t114 684 | 115t 685 | t115 686 | 116t 687 | t116 688 | 117t 689 | t117 690 | 118t 691 | t118 692 | 119t 693 | t119 694 | 120t 695 | t120 696 | 121t 697 | t121 698 | 122t 699 | t122 700 | 123t 701 | t123 702 | -------------------------------------------------------------------------------- /rules/T0XlC-insert_space_and_special_0_F.rule: -------------------------------------------------------------------------------- 1 | # Created by: T0XlC 2 | # All special characters shifted from position 0 to position F 3 | # In memory of d3ad0ne 4 | i0 5 | i1 6 | i2 7 | i3 8 | i4 9 | i5 10 | i6 11 | i7 12 | i8 13 | i9 14 | iA 15 | iB 16 | iC 17 | iD 18 | iE 19 | iF 20 | i0. 21 | i1. 22 | i2. 23 | i3. 24 | i4. 25 | i5. 26 | i6. 27 | i7. 28 | i8. 29 | i9. 30 | iA. 31 | iB. 32 | iC. 33 | iD. 34 | iE. 35 | iF. 36 | i0! 37 | i1! 38 | i2! 39 | i3! 40 | i4! 41 | i5! 42 | i6! 43 | i7! 44 | i8! 45 | i9! 46 | iA! 47 | iB! 48 | iC! 49 | iD! 50 | iE! 51 | iF! 52 | i0@ 53 | i1@ 54 | i2@ 55 | i3@ 56 | i4@ 57 | i5@ 58 | i6@ 59 | i7@ 60 | i8@ 61 | i9@ 62 | iA@ 63 | iB@ 64 | iC@ 65 | iD@ 66 | iE@ 67 | iF@ 68 | i0# 69 | i1# 70 | i2# 71 | i3# 72 | i4# 73 | i5# 74 | i6# 75 | i7# 76 | i8# 77 | i9# 78 | iA# 79 | iB# 80 | iC# 81 | iD# 82 | iE# 83 | iF# 84 | i0$ 85 | i1$ 86 | i2$ 87 | i3$ 88 | i4$ 89 | i5$ 90 | i6$ 91 | i7$ 92 | i8$ 93 | i9$ 94 | iA$ 95 | iB$ 96 | iC$ 97 | iD$ 98 | iE$ 99 | iF$ 100 | i0% 101 | i1% 102 | i2% 103 | i3% 104 | i4% 105 | i5% 106 | i6% 107 | i7% 108 | i8% 109 | i9% 110 | iA% 111 | iB% 112 | iC% 113 | iD% 114 | iE% 115 | iF% 116 | i0^ 117 | i1^ 118 | i2^ 119 | i3^ 120 | i4^ 121 | i5^ 122 | i6^ 123 | i7^ 124 | i8^ 125 | i9^ 126 | iA^ 127 | iB^ 128 | iC^ 129 | iD^ 130 | iE^ 131 | iF^ 132 | i0& 133 | i1& 134 | i2& 135 | i3& 136 | i4& 137 | i5& 138 | i6& 139 | i7& 140 | i8& 141 | i9& 142 | iA& 143 | iB& 144 | iC& 145 | iD& 146 | iE& 147 | iF& 148 | i0* 149 | i1* 150 | i2* 151 | i3* 152 | i4* 153 | i5* 154 | i6* 155 | i7* 156 | i8* 157 | i9* 158 | iA* 159 | iB* 160 | iC* 161 | iD* 162 | iE* 163 | iF* 164 | i0( 165 | i1( 166 | i2( 167 | i3( 168 | i4( 169 | i5( 170 | i6( 171 | i7( 172 | i8( 173 | i9( 174 | iA( 175 | iB( 176 | iC( 177 | iD( 178 | iE( 179 | iF( 180 | i0) 181 | i1) 182 | i2) 183 | i3) 184 | i4) 185 | i5) 186 | i6) 187 | i7) 188 | i8) 189 | i9) 190 | iA) 191 | iB) 192 | iC) 193 | iD) 194 | iE) 195 | iF) 196 | i0_ 197 | i1_ 198 | i2_ 199 | i3_ 200 | i4_ 201 | i5_ 202 | i6_ 203 | i7_ 204 | i8_ 205 | i9_ 206 | iA_ 207 | iB_ 208 | iC_ 209 | iD_ 210 | iE_ 211 | iF_ 212 | i0- 213 | i1- 214 | i2- 215 | i3- 216 | i4- 217 | i5- 218 | i6- 219 | i7- 220 | i8- 221 | i9- 222 | iA- 223 | iB- 224 | iC- 225 | iD- 226 | iE- 227 | iF- 228 | i0" 229 | i1" 230 | i2" 231 | i3" 232 | i4" 233 | i5" 234 | i6" 235 | i7" 236 | i8" 237 | i9" 238 | iA" 239 | iB" 240 | iC" 241 | iD" 242 | iE" 243 | iF" 244 | i0' 245 | i1' 246 | i2' 247 | i3' 248 | i4' 249 | i5' 250 | i6' 251 | i7' 252 | i8' 253 | i9' 254 | iA' 255 | iB' 256 | iC' 257 | iD' 258 | iE' 259 | iF' 260 | i0/ 261 | i1/ 262 | i2/ 263 | i3/ 264 | i4/ 265 | i5/ 266 | i6/ 267 | i7/ 268 | i8/ 269 | i9/ 270 | iA/ 271 | iB/ 272 | iC/ 273 | iD/ 274 | iE/ 275 | iF/ 276 | i0: 277 | i1: 278 | i2: 279 | i3: 280 | i4: 281 | i5: 282 | i6: 283 | i7: 284 | i8: 285 | i9: 286 | iA: 287 | iB: 288 | iC: 289 | iD: 290 | iE: 291 | iF: 292 | i0; 293 | i1; 294 | i2; 295 | i3; 296 | i4; 297 | i5; 298 | i6; 299 | i7; 300 | i8; 301 | i9; 302 | iA; 303 | iB; 304 | iC; 305 | iD; 306 | iE; 307 | iF; 308 | i0> 309 | i1> 310 | i2> 311 | i3> 312 | i4> 313 | i5> 314 | i6> 315 | i7> 316 | i8> 317 | i9> 318 | iA> 319 | iB> 320 | iC> 321 | iD> 322 | iE> 323 | iF> 324 | i0< 325 | i1< 326 | i2< 327 | i3< 328 | i4< 329 | i5< 330 | i6< 331 | i7< 332 | i8< 333 | i9< 334 | iA< 335 | iB< 336 | iC< 337 | iD< 338 | iE< 339 | iF< 340 | i0= 341 | i1= 342 | i2= 343 | i3= 344 | i4= 345 | i5= 346 | i6= 347 | i7= 348 | i8= 349 | i9= 350 | iA= 351 | iB= 352 | iC= 353 | iD= 354 | iE= 355 | iF= 356 | i0? 357 | i1? 358 | i2? 359 | i3? 360 | i4? 361 | i5? 362 | i6? 363 | i7? 364 | i8? 365 | i9? 366 | iA? 367 | iB? 368 | iC? 369 | iD? 370 | iE? 371 | iF? 372 | i0] 373 | i1] 374 | i2] 375 | i3] 376 | i4] 377 | i5] 378 | i6] 379 | i7] 380 | i8] 381 | i9] 382 | iA] 383 | iB] 384 | iC] 385 | iD] 386 | iE] 387 | iF] 388 | i0[ 389 | i1[ 390 | i2[ 391 | i3[ 392 | i4[ 393 | i5[ 394 | i6[ 395 | i7[ 396 | i8[ 397 | i9[ 398 | iA[ 399 | iB[ 400 | iC[ 401 | iD[ 402 | iE[ 403 | iF[ 404 | i0` 405 | i1` 406 | i2` 407 | i3` 408 | i4` 409 | i5` 410 | i6` 411 | i7` 412 | i8` 413 | i9` 414 | iA` 415 | iB` 416 | iC` 417 | iD` 418 | iE` 419 | iF` 420 | i0{ 421 | i1{ 422 | i2{ 423 | i3{ 424 | i4{ 425 | i5{ 426 | i6{ 427 | i7{ 428 | i8{ 429 | i9{ 430 | iA{ 431 | iB{ 432 | iC{ 433 | iD{ 434 | iE{ 435 | iF{ 436 | i0} 437 | i1} 438 | i2} 439 | i3} 440 | i4} 441 | i5} 442 | i6} 443 | i7} 444 | i8} 445 | i9} 446 | iA} 447 | iB} 448 | iC} 449 | iD} 450 | iE} 451 | iF} 452 | i0| 453 | i1| 454 | i2| 455 | i3| 456 | i4| 457 | i5| 458 | i6| 459 | i7| 460 | i8| 461 | i9| 462 | iA| 463 | iB| 464 | iC| 465 | iD| 466 | iE| 467 | iF| 468 | i0~ 469 | i1~ 470 | i2~ 471 | i3~ 472 | i4~ 473 | i5~ 474 | i6~ 475 | i7~ 476 | i8~ 477 | i9~ 478 | iA~ 479 | iB~ 480 | iC~ 481 | iD~ 482 | iE~ 483 | iF~ -------------------------------------------------------------------------------- /rules/best64.rule: -------------------------------------------------------------------------------- 1 | ## nothing, reverse, case... base stuff 2 | : 3 | r 4 | u 5 | T0 6 | 7 | ## simple number append 8 | $0 9 | $1 10 | $2 11 | $3 12 | $4 13 | $5 14 | $6 15 | $7 16 | $8 17 | $9 18 | 19 | ## special number append 20 | $0 $0 21 | $0 $1 22 | $0 $2 23 | $1 $1 24 | $1 $2 25 | $1 $3 26 | $2 $1 27 | $2 $2 28 | $2 $3 29 | $6 $9 30 | $7 $7 31 | $8 $8 32 | $9 $9 33 | $1 $2 $3 34 | 35 | ## high frequency append 36 | $e 37 | $s 38 | 39 | ## high frequency overwrite at end 40 | ] $a 41 | ] ] $s 42 | ] ] $a 43 | ] ] $e $r 44 | ] ] $i $e 45 | ] ] ] $o 46 | ] ] ] $y 47 | ] ] ] $1 $2 $3 48 | ] ] ] $m $a $n 49 | ] ] ] $d $o $g 50 | 51 | ## high frequency prepend 52 | ^1 53 | ^e ^h ^t 54 | 55 | ## high frequency overwrite at start 56 | o0d 57 | o0m o1a 58 | 59 | ## leetify 60 | so0 61 | si1 62 | se3 63 | 64 | ## simple extracts 65 | D2 66 | D2 D2 67 | D3 68 | D4 69 | 70 | ## undouble word 71 | '5 D3 72 | '5 $1 73 | 74 | ## removes suffixes from 'strongified' passwords in dict 75 | ] 76 | ] ] 77 | ] ] ] 78 | ] ] ] d 79 | ] ] D1 ] 80 | 81 | ## rotates 82 | +5 ] } } } } '4 83 | O02 { { { { { { 84 | } ] ] { 85 | } } -0 O12 86 | } } } 87 | } } } } '4 88 | } } } } } '5 89 | } } } } } } Y4 '4 d 90 | 91 | ## unknown 92 | *04 +0 '4 93 | *05 O03 d '3 p1 94 | +0 +0 +0 +0 +0 +0 +0 +0 95 | +0 +0 +0 O12 96 | Z4 '8 O42 97 | Z5 '6 O31 ] p1 98 | Z5 *75 '5 { O02 99 | d O28 Y4 '4 d 100 | f *A5 '8 O14 101 | p2 '7 p1 O58 102 | O14 d p2 '6 103 | -------------------------------------------------------------------------------- /rules/combinator.rule: -------------------------------------------------------------------------------- 1 | ## rule: case recovery 2 | ## limits: capitalized rules only char positions 3 to 7 3 | ## example: annalove ---> AnnaLove 4 | ## extras: none 5 | 6 | : 7 | l 8 | c 9 | u 10 | 11 | c T3 12 | c T4 13 | c T5 14 | c T6 15 | c T7 16 | 17 | ## rule: experienced effective 18 | ## limits: none 19 | ## example: FringeDevision ---> fringedevision2009 20 | ## extras: lower case only 21 | 22 | l $1 23 | l $2 24 | l $1$2$3 25 | l $2$0$0$7 26 | l $2$0$0$8 27 | l $2$0$0$9 28 | 29 | ## rule: hyphen variety 30 | ## limits: insert at char positions 3 to 7 31 | ## example: theobserver ---> the observer 32 | ## extras: lower case only 33 | 34 | l i3 35 | l i4 36 | l i5 37 | l i6 38 | l i7 39 | l i3& 40 | l i4& 41 | l i5& 42 | l i6& 43 | l i7& 44 | l i3+ 45 | l i4+ 46 | l i5+ 47 | l i6+ 48 | l i7+ 49 | l i3- 50 | l i4- 51 | l i5- 52 | l i6- 53 | l i7- 54 | l i3. 55 | l i4. 56 | l i5. 57 | l i6. 58 | l i7. 59 | 60 | -------------------------------------------------------------------------------- /rules/hob064.rule: -------------------------------------------------------------------------------- 1 | ############################################# 2 | # *** Hob0's QUICK Rules for Conquest *** # 3 | # *** Updated: 1/27/16 *** # 4 | ############################################# 5 | : 6 | r 7 | T0 8 | u 9 | ] 10 | d 11 | $! 12 | $! $! 13 | $@ 14 | $# 15 | $$ 16 | $% 17 | $^ 18 | $& 19 | $* 20 | $. 21 | $? 22 | $1 $! 23 | $! $1 24 | @a @e @i @o @u 25 | @a @e @i @o @u $! 26 | $0 27 | $1 28 | $2 29 | $3 30 | $4 31 | $5 32 | $6 33 | $7 34 | $8 35 | $9 36 | $2 $0 $1 $5 37 | $2 $0 $1 $6 38 | $2 $0 $1 $6 $! 39 | $1 $5 40 | $1 $6 $! 41 | $1 $4 42 | $1 $1 43 | $1 $2 44 | $0 $1 45 | $0 $0 46 | $2 $3 47 | $6 $9 48 | $7 $7 49 | $9 $9 50 | $1 $2 $3 51 | $1 $2 $3 $4 52 | ^6 ^1 ^0 ^2 53 | ^6 ^1 54 | ^1 55 | ^! 56 | so0 57 | si1 58 | si! 59 | se3 60 | ss$ 61 | sa@ 62 | so0 si1 63 | so0 sa@ 64 | so0 sa4 65 | so0 se3 66 | so0 si1 se3 ss$ sa@ 67 | so0 si1 se3 ss$ sa@ $! 68 | so0 si1 se3 ss$ sa@ $1 $6 69 | -------------------------------------------------------------------------------- /rules/leetspeak.rule: -------------------------------------------------------------------------------- 1 | ## rule: leetspeak single 2 | ## limits: none 3 | ## example: john ---> j0hn 4 | ## extras: case original, lower, upper 5 | 6 | sa4 7 | sa@ 8 | sb6 9 | sc< 10 | sc{ 11 | se3 12 | sg9 13 | si1 14 | si! 15 | so0 16 | sq9 17 | ss5 18 | ss$ 19 | st7 20 | st+ 21 | sx% 22 | 23 | ## rule: leetspeak multi 24 | ## limits: none 25 | ## example: johnbox ---> j0hnbox 26 | ## extras: all case variants 27 | 28 | sa@sc johnnobel 4 | ## extras: experienced effective cases 5 | 6 | >A k l 7 | >A k u 8 | >A k c 9 | 10 | ## rule: permuted switch of chars of word with each other 11 | ## limits: char positions 0 to 9 12 | ## example: peterbishop ---> petrebishop 13 | ## extras: none 14 | 15 | *01 16 | *02 17 | *03 18 | *04 19 | *05 20 | *06 21 | *07 22 | *08 23 | *09 24 | *12 25 | *13 26 | *14 27 | *15 28 | *16 29 | *17 30 | *18 31 | *19 32 | *23 33 | *24 34 | *25 35 | *26 36 | *27 37 | *28 38 | *29 39 | *34 40 | *35 41 | *36 42 | *37 43 | *38 44 | *39 45 | *45 46 | *46 47 | *47 48 | *48 49 | *49 50 | *56 51 | *57 52 | *58 53 | *59 54 | *67 55 | *68 56 | *69 57 | *78 58 | *79 59 | *89 60 | 61 | ## rule: increase char 62 | ## limits: positions 0 to 9 63 | ## example: nina555 ---> nina666 64 | ## extras: none 65 | 66 | +0 67 | +1 68 | +2 69 | +3 70 | +4 71 | +5 72 | +6 73 | +7 74 | +8 75 | +9 76 | 77 | +0+1 78 | +1+2 79 | +2+3 80 | +3+4 81 | +4+5 82 | +5+6 83 | +6+7 84 | +7+8 85 | +8+9 86 | 87 | +0+0 88 | +1+1 89 | +2+2 90 | +3+3 91 | +4+4 92 | +5+5 93 | +6+6 94 | +7+7 95 | +8+8 96 | +9+9 97 | 98 | +0+1+2 99 | +1+2+3 100 | +2+3+4 101 | +3+4+5 102 | +4+5+6 103 | +5+6+7 104 | +6+7+8 105 | +7+8+9 106 | 107 | +0+0+0 108 | +1+1+1 109 | +2+2+2 110 | +3+3+3 111 | +4+4+4 112 | +5+5+5 113 | +6+6+6 114 | +7+7+7 115 | +8+8+8 116 | +9+9+9 117 | 118 | +0+1+2+3 119 | +1+2+3+4 120 | +2+3+4+5 121 | +3+4+5+6 122 | +4+5+6+7 123 | +5+6+7+8 124 | +6+7+8+9 125 | 126 | +0+0+0+0 127 | +1+1+1+1 128 | +2+2+2+2 129 | +3+3+3+3 130 | +4+4+4+4 131 | +5+5+5+5 132 | +6+6+6+6 133 | +7+7+7+7 134 | +8+8+8+8 135 | +9+9+9+9 136 | 137 | ## rule: decrease char 138 | ## limits: positions 0 to 9 139 | ## example: astrid0816 ---> astrid0815 140 | ## extras: none 141 | 142 | -0 143 | -1 144 | -2 145 | -3 146 | -4 147 | -5 148 | -6 149 | -7 150 | -8 151 | -9 152 | 153 | -0-1 154 | -1-2 155 | -2-3 156 | -3-4 157 | -4-5 158 | -5-6 159 | -6-7 160 | -7-8 161 | -8-9 162 | 163 | -0-0 164 | -1-1 165 | -2-2 166 | -3-3 167 | -4-4 168 | -5-5 169 | -6-6 170 | -7-7 171 | -8-8 172 | -9-9 173 | 174 | -0-1-2 175 | -1-2-3 176 | -2-3-4 177 | -3-4-5 178 | -4-5-6 179 | -5-6-7 180 | -6-7-8 181 | -7-8-9 182 | 183 | -0-0-0 184 | -1-1-1 185 | -2-2-2 186 | -3-3-3 187 | -4-4-4 188 | -5-5-5 189 | -6-6-6 190 | -7-7-7 191 | -8-8-8 192 | -9-9-9 193 | 194 | -0-1-2-3 195 | -1-2-3-4 196 | -2-3-4-5 197 | -3-4-5-6 198 | -4-5-6-7 199 | -5-6-7-8 200 | -6-7-8-9 201 | 202 | -0-0-0-0 203 | -1-1-1-1 204 | -2-2-2-2 205 | -3-3-3-3 206 | -4-4-4-4 207 | -5-5-5-5 208 | -6-6-6-6 209 | -7-7-7-7 210 | -8-8-8-8 211 | -9-9-9-9 212 | -------------------------------------------------------------------------------- /rules/toggles1.rule: -------------------------------------------------------------------------------- 1 | T0 2 | T1 3 | T2 4 | T3 5 | T4 6 | T5 7 | T6 8 | T7 9 | T8 10 | T9 11 | TA 12 | TB 13 | TC 14 | TD 15 | TE 16 | -------------------------------------------------------------------------------- /rules/toggles2.rule: -------------------------------------------------------------------------------- 1 | T0 2 | T1 3 | T2 4 | T3 5 | T4 6 | T5 7 | T6 8 | T7 9 | T8 10 | T9 11 | TA 12 | TB 13 | TC 14 | TD 15 | TE 16 | T0T1 17 | T0T2 18 | T0T3 19 | T0T4 20 | T0T5 21 | T0T6 22 | T0T7 23 | T0T8 24 | T0T9 25 | T0TA 26 | T0TB 27 | T0TC 28 | T0TD 29 | T0TE 30 | T1T2 31 | T1T3 32 | T1T4 33 | T1T5 34 | T1T6 35 | T1T7 36 | T1T8 37 | T1T9 38 | T1TA 39 | T1TB 40 | T1TC 41 | T1TD 42 | T1TE 43 | T2T3 44 | T2T4 45 | T2T5 46 | T2T6 47 | T2T7 48 | T2T8 49 | T2T9 50 | T2TA 51 | T2TB 52 | T2TC 53 | T2TD 54 | T2TE 55 | T3T4 56 | T3T5 57 | T3T6 58 | T3T7 59 | T3T8 60 | T3T9 61 | T3TA 62 | T3TB 63 | T3TC 64 | T3TD 65 | T3TE 66 | T4T5 67 | T4T6 68 | T4T7 69 | T4T8 70 | T4T9 71 | T4TA 72 | T4TB 73 | T4TC 74 | T4TD 75 | T4TE 76 | T5T6 77 | T5T7 78 | T5T8 79 | T5T9 80 | T5TA 81 | T5TB 82 | T5TC 83 | T5TD 84 | T5TE 85 | T6T7 86 | T6T8 87 | T6T9 88 | T6TA 89 | T6TB 90 | T6TC 91 | T6TD 92 | T6TE 93 | T7T8 94 | T7T9 95 | T7TA 96 | T7TB 97 | T7TC 98 | T7TD 99 | T7TE 100 | T8T9 101 | T8TA 102 | T8TB 103 | T8TC 104 | T8TD 105 | T8TE 106 | T9TA 107 | T9TB 108 | T9TC 109 | T9TD 110 | T9TE 111 | TATB 112 | TATC 113 | TATD 114 | TATE 115 | TBTC 116 | TBTD 117 | TBTE 118 | TCTD 119 | TCTE 120 | TDTE 121 | -------------------------------------------------------------------------------- /rules/toggles3.rule: -------------------------------------------------------------------------------- 1 | T0 2 | T1 3 | T2 4 | T3 5 | T4 6 | T5 7 | T6 8 | T7 9 | T8 10 | T9 11 | TA 12 | TB 13 | TC 14 | TD 15 | TE 16 | T0T1 17 | T0T2 18 | T0T3 19 | T0T4 20 | T0T5 21 | T0T6 22 | T0T7 23 | T0T8 24 | T0T9 25 | T0TA 26 | T0TB 27 | T0TC 28 | T0TD 29 | T0TE 30 | T1T2 31 | T1T3 32 | T1T4 33 | T1T5 34 | T1T6 35 | T1T7 36 | T1T8 37 | T1T9 38 | T1TA 39 | T1TB 40 | T1TC 41 | T1TD 42 | T1TE 43 | T2T3 44 | T2T4 45 | T2T5 46 | T2T6 47 | T2T7 48 | T2T8 49 | T2T9 50 | T2TA 51 | T2TB 52 | T2TC 53 | T2TD 54 | T2TE 55 | T3T4 56 | T3T5 57 | T3T6 58 | T3T7 59 | T3T8 60 | T3T9 61 | T3TA 62 | T3TB 63 | T3TC 64 | T3TD 65 | T3TE 66 | T4T5 67 | T4T6 68 | T4T7 69 | T4T8 70 | T4T9 71 | T4TA 72 | T4TB 73 | T4TC 74 | T4TD 75 | T4TE 76 | T5T6 77 | T5T7 78 | T5T8 79 | T5T9 80 | T5TA 81 | T5TB 82 | T5TC 83 | T5TD 84 | T5TE 85 | T6T7 86 | T6T8 87 | T6T9 88 | T6TA 89 | T6TB 90 | T6TC 91 | T6TD 92 | T6TE 93 | T7T8 94 | T7T9 95 | T7TA 96 | T7TB 97 | T7TC 98 | T7TD 99 | T7TE 100 | T8T9 101 | T8TA 102 | T8TB 103 | T8TC 104 | T8TD 105 | T8TE 106 | T9TA 107 | T9TB 108 | T9TC 109 | T9TD 110 | T9TE 111 | TATB 112 | TATC 113 | TATD 114 | TATE 115 | TBTC 116 | TBTD 117 | TBTE 118 | TCTD 119 | TCTE 120 | TDTE 121 | T0T1T2 122 | T0T1T3 123 | T0T1T4 124 | T0T1T5 125 | T0T1T6 126 | T0T1T7 127 | T0T1T8 128 | T0T1T9 129 | T0T1TA 130 | T0T1TB 131 | T0T1TC 132 | T0T1TD 133 | T0T1TE 134 | T0T2T3 135 | T0T2T4 136 | T0T2T5 137 | T0T2T6 138 | T0T2T7 139 | T0T2T8 140 | T0T2T9 141 | T0T2TA 142 | T0T2TB 143 | T0T2TC 144 | T0T2TD 145 | T0T2TE 146 | T0T3T4 147 | T0T3T5 148 | T0T3T6 149 | T0T3T7 150 | T0T3T8 151 | T0T3T9 152 | T0T3TA 153 | T0T3TB 154 | T0T3TC 155 | T0T3TD 156 | T0T3TE 157 | T0T4T5 158 | T0T4T6 159 | T0T4T7 160 | T0T4T8 161 | T0T4T9 162 | T0T4TA 163 | T0T4TB 164 | T0T4TC 165 | T0T4TD 166 | T0T4TE 167 | T0T5T6 168 | T0T5T7 169 | T0T5T8 170 | T0T5T9 171 | T0T5TA 172 | T0T5TB 173 | T0T5TC 174 | T0T5TD 175 | T0T5TE 176 | T0T6T7 177 | T0T6T8 178 | T0T6T9 179 | T0T6TA 180 | T0T6TB 181 | T0T6TC 182 | T0T6TD 183 | T0T6TE 184 | T0T7T8 185 | T0T7T9 186 | T0T7TA 187 | T0T7TB 188 | T0T7TC 189 | T0T7TD 190 | T0T7TE 191 | T0T8T9 192 | T0T8TA 193 | T0T8TB 194 | T0T8TC 195 | T0T8TD 196 | T0T8TE 197 | T0T9TA 198 | T0T9TB 199 | T0T9TC 200 | T0T9TD 201 | T0T9TE 202 | T0TATB 203 | T0TATC 204 | T0TATD 205 | T0TATE 206 | T0TBTC 207 | T0TBTD 208 | T0TBTE 209 | T0TCTD 210 | T0TCTE 211 | T0TDTE 212 | T1T2T3 213 | T1T2T4 214 | T1T2T5 215 | T1T2T6 216 | T1T2T7 217 | T1T2T8 218 | T1T2T9 219 | T1T2TA 220 | T1T2TB 221 | T1T2TC 222 | T1T2TD 223 | T1T2TE 224 | T1T3T4 225 | T1T3T5 226 | T1T3T6 227 | T1T3T7 228 | T1T3T8 229 | T1T3T9 230 | T1T3TA 231 | T1T3TB 232 | T1T3TC 233 | T1T3TD 234 | T1T3TE 235 | T1T4T5 236 | T1T4T6 237 | T1T4T7 238 | T1T4T8 239 | T1T4T9 240 | T1T4TA 241 | T1T4TB 242 | T1T4TC 243 | T1T4TD 244 | T1T4TE 245 | T1T5T6 246 | T1T5T7 247 | T1T5T8 248 | T1T5T9 249 | T1T5TA 250 | T1T5TB 251 | T1T5TC 252 | T1T5TD 253 | T1T5TE 254 | T1T6T7 255 | T1T6T8 256 | T1T6T9 257 | T1T6TA 258 | T1T6TB 259 | T1T6TC 260 | T1T6TD 261 | T1T6TE 262 | T1T7T8 263 | T1T7T9 264 | T1T7TA 265 | T1T7TB 266 | T1T7TC 267 | T1T7TD 268 | T1T7TE 269 | T1T8T9 270 | T1T8TA 271 | T1T8TB 272 | T1T8TC 273 | T1T8TD 274 | T1T8TE 275 | T1T9TA 276 | T1T9TB 277 | T1T9TC 278 | T1T9TD 279 | T1T9TE 280 | T1TATB 281 | T1TATC 282 | T1TATD 283 | T1TATE 284 | T1TBTC 285 | T1TBTD 286 | T1TBTE 287 | T1TCTD 288 | T1TCTE 289 | T1TDTE 290 | T2T3T4 291 | T2T3T5 292 | T2T3T6 293 | T2T3T7 294 | T2T3T8 295 | T2T3T9 296 | T2T3TA 297 | T2T3TB 298 | T2T3TC 299 | T2T3TD 300 | T2T3TE 301 | T2T4T5 302 | T2T4T6 303 | T2T4T7 304 | T2T4T8 305 | T2T4T9 306 | T2T4TA 307 | T2T4TB 308 | T2T4TC 309 | T2T4TD 310 | T2T4TE 311 | T2T5T6 312 | T2T5T7 313 | T2T5T8 314 | T2T5T9 315 | T2T5TA 316 | T2T5TB 317 | T2T5TC 318 | T2T5TD 319 | T2T5TE 320 | T2T6T7 321 | T2T6T8 322 | T2T6T9 323 | T2T6TA 324 | T2T6TB 325 | T2T6TC 326 | T2T6TD 327 | T2T6TE 328 | T2T7T8 329 | T2T7T9 330 | T2T7TA 331 | T2T7TB 332 | T2T7TC 333 | T2T7TD 334 | T2T7TE 335 | T2T8T9 336 | T2T8TA 337 | T2T8TB 338 | T2T8TC 339 | T2T8TD 340 | T2T8TE 341 | T2T9TA 342 | T2T9TB 343 | T2T9TC 344 | T2T9TD 345 | T2T9TE 346 | T2TATB 347 | T2TATC 348 | T2TATD 349 | T2TATE 350 | T2TBTC 351 | T2TBTD 352 | T2TBTE 353 | T2TCTD 354 | T2TCTE 355 | T2TDTE 356 | T3T4T5 357 | T3T4T6 358 | T3T4T7 359 | T3T4T8 360 | T3T4T9 361 | T3T4TA 362 | T3T4TB 363 | T3T4TC 364 | T3T4TD 365 | T3T4TE 366 | T3T5T6 367 | T3T5T7 368 | T3T5T8 369 | T3T5T9 370 | T3T5TA 371 | T3T5TB 372 | T3T5TC 373 | T3T5TD 374 | T3T5TE 375 | T3T6T7 376 | T3T6T8 377 | T3T6T9 378 | T3T6TA 379 | T3T6TB 380 | T3T6TC 381 | T3T6TD 382 | T3T6TE 383 | T3T7T8 384 | T3T7T9 385 | T3T7TA 386 | T3T7TB 387 | T3T7TC 388 | T3T7TD 389 | T3T7TE 390 | T3T8T9 391 | T3T8TA 392 | T3T8TB 393 | T3T8TC 394 | T3T8TD 395 | T3T8TE 396 | T3T9TA 397 | T3T9TB 398 | T3T9TC 399 | T3T9TD 400 | T3T9TE 401 | T3TATB 402 | T3TATC 403 | T3TATD 404 | T3TATE 405 | T3TBTC 406 | T3TBTD 407 | T3TBTE 408 | T3TCTD 409 | T3TCTE 410 | T3TDTE 411 | T4T5T6 412 | T4T5T7 413 | T4T5T8 414 | T4T5T9 415 | T4T5TA 416 | T4T5TB 417 | T4T5TC 418 | T4T5TD 419 | T4T5TE 420 | T4T6T7 421 | T4T6T8 422 | T4T6T9 423 | T4T6TA 424 | T4T6TB 425 | T4T6TC 426 | T4T6TD 427 | T4T6TE 428 | T4T7T8 429 | T4T7T9 430 | T4T7TA 431 | T4T7TB 432 | T4T7TC 433 | T4T7TD 434 | T4T7TE 435 | T4T8T9 436 | T4T8TA 437 | T4T8TB 438 | T4T8TC 439 | T4T8TD 440 | T4T8TE 441 | T4T9TA 442 | T4T9TB 443 | T4T9TC 444 | T4T9TD 445 | T4T9TE 446 | T4TATB 447 | T4TATC 448 | T4TATD 449 | T4TATE 450 | T4TBTC 451 | T4TBTD 452 | T4TBTE 453 | T4TCTD 454 | T4TCTE 455 | T4TDTE 456 | T5T6T7 457 | T5T6T8 458 | T5T6T9 459 | T5T6TA 460 | T5T6TB 461 | T5T6TC 462 | T5T6TD 463 | T5T6TE 464 | T5T7T8 465 | T5T7T9 466 | T5T7TA 467 | T5T7TB 468 | T5T7TC 469 | T5T7TD 470 | T5T7TE 471 | T5T8T9 472 | T5T8TA 473 | T5T8TB 474 | T5T8TC 475 | T5T8TD 476 | T5T8TE 477 | T5T9TA 478 | T5T9TB 479 | T5T9TC 480 | T5T9TD 481 | T5T9TE 482 | T5TATB 483 | T5TATC 484 | T5TATD 485 | T5TATE 486 | T5TBTC 487 | T5TBTD 488 | T5TBTE 489 | T5TCTD 490 | T5TCTE 491 | T5TDTE 492 | T6T7T8 493 | T6T7T9 494 | T6T7TA 495 | T6T7TB 496 | T6T7TC 497 | T6T7TD 498 | T6T7TE 499 | T6T8T9 500 | T6T8TA 501 | T6T8TB 502 | T6T8TC 503 | T6T8TD 504 | T6T8TE 505 | T6T9TA 506 | T6T9TB 507 | T6T9TC 508 | T6T9TD 509 | T6T9TE 510 | T6TATB 511 | T6TATC 512 | T6TATD 513 | T6TATE 514 | T6TBTC 515 | T6TBTD 516 | T6TBTE 517 | T6TCTD 518 | T6TCTE 519 | T6TDTE 520 | T7T8T9 521 | T7T8TA 522 | T7T8TB 523 | T7T8TC 524 | T7T8TD 525 | T7T8TE 526 | T7T9TA 527 | T7T9TB 528 | T7T9TC 529 | T7T9TD 530 | T7T9TE 531 | T7TATB 532 | T7TATC 533 | T7TATD 534 | T7TATE 535 | T7TBTC 536 | T7TBTD 537 | T7TBTE 538 | T7TCTD 539 | T7TCTE 540 | T7TDTE 541 | T8T9TA 542 | T8T9TB 543 | T8T9TC 544 | T8T9TD 545 | T8T9TE 546 | T8TATB 547 | T8TATC 548 | T8TATD 549 | T8TATE 550 | T8TBTC 551 | T8TBTD 552 | T8TBTE 553 | T8TCTD 554 | T8TCTE 555 | T8TDTE 556 | T9TATB 557 | T9TATC 558 | T9TATD 559 | T9TATE 560 | T9TBTC 561 | T9TBTD 562 | T9TBTE 563 | T9TCTD 564 | T9TCTE 565 | T9TDTE 566 | TATBTC 567 | TATBTD 568 | TATBTE 569 | TATCTD 570 | TATCTE 571 | TATDTE 572 | TBTCTD 573 | TBTCTE 574 | TBTDTE 575 | TCTDTE 576 | -------------------------------------------------------------------------------- /rules/toggles4.rule: -------------------------------------------------------------------------------- 1 | T0 2 | T1 3 | T2 4 | T3 5 | T4 6 | T5 7 | T6 8 | T7 9 | T8 10 | T9 11 | TA 12 | TB 13 | TC 14 | TD 15 | TE 16 | T0T1 17 | T0T2 18 | T0T3 19 | T0T4 20 | T0T5 21 | T0T6 22 | T0T7 23 | T0T8 24 | T0T9 25 | T0TA 26 | T0TB 27 | T0TC 28 | T0TD 29 | T0TE 30 | T1T2 31 | T1T3 32 | T1T4 33 | T1T5 34 | T1T6 35 | T1T7 36 | T1T8 37 | T1T9 38 | T1TA 39 | T1TB 40 | T1TC 41 | T1TD 42 | T1TE 43 | T2T3 44 | T2T4 45 | T2T5 46 | T2T6 47 | T2T7 48 | T2T8 49 | T2T9 50 | T2TA 51 | T2TB 52 | T2TC 53 | T2TD 54 | T2TE 55 | T3T4 56 | T3T5 57 | T3T6 58 | T3T7 59 | T3T8 60 | T3T9 61 | T3TA 62 | T3TB 63 | T3TC 64 | T3TD 65 | T3TE 66 | T4T5 67 | T4T6 68 | T4T7 69 | T4T8 70 | T4T9 71 | T4TA 72 | T4TB 73 | T4TC 74 | T4TD 75 | T4TE 76 | T5T6 77 | T5T7 78 | T5T8 79 | T5T9 80 | T5TA 81 | T5TB 82 | T5TC 83 | T5TD 84 | T5TE 85 | T6T7 86 | T6T8 87 | T6T9 88 | T6TA 89 | T6TB 90 | T6TC 91 | T6TD 92 | T6TE 93 | T7T8 94 | T7T9 95 | T7TA 96 | T7TB 97 | T7TC 98 | T7TD 99 | T7TE 100 | T8T9 101 | T8TA 102 | T8TB 103 | T8TC 104 | T8TD 105 | T8TE 106 | T9TA 107 | T9TB 108 | T9TC 109 | T9TD 110 | T9TE 111 | TATB 112 | TATC 113 | TATD 114 | TATE 115 | TBTC 116 | TBTD 117 | TBTE 118 | TCTD 119 | TCTE 120 | TDTE 121 | T0T1T2 122 | T0T1T3 123 | T0T1T4 124 | T0T1T5 125 | T0T1T6 126 | T0T1T7 127 | T0T1T8 128 | T0T1T9 129 | T0T1TA 130 | T0T1TB 131 | T0T1TC 132 | T0T1TD 133 | T0T1TE 134 | T0T2T3 135 | T0T2T4 136 | T0T2T5 137 | T0T2T6 138 | T0T2T7 139 | T0T2T8 140 | T0T2T9 141 | T0T2TA 142 | T0T2TB 143 | T0T2TC 144 | T0T2TD 145 | T0T2TE 146 | T0T3T4 147 | T0T3T5 148 | T0T3T6 149 | T0T3T7 150 | T0T3T8 151 | T0T3T9 152 | T0T3TA 153 | T0T3TB 154 | T0T3TC 155 | T0T3TD 156 | T0T3TE 157 | T0T4T5 158 | T0T4T6 159 | T0T4T7 160 | T0T4T8 161 | T0T4T9 162 | T0T4TA 163 | T0T4TB 164 | T0T4TC 165 | T0T4TD 166 | T0T4TE 167 | T0T5T6 168 | T0T5T7 169 | T0T5T8 170 | T0T5T9 171 | T0T5TA 172 | T0T5TB 173 | T0T5TC 174 | T0T5TD 175 | T0T5TE 176 | T0T6T7 177 | T0T6T8 178 | T0T6T9 179 | T0T6TA 180 | T0T6TB 181 | T0T6TC 182 | T0T6TD 183 | T0T6TE 184 | T0T7T8 185 | T0T7T9 186 | T0T7TA 187 | T0T7TB 188 | T0T7TC 189 | T0T7TD 190 | T0T7TE 191 | T0T8T9 192 | T0T8TA 193 | T0T8TB 194 | T0T8TC 195 | T0T8TD 196 | T0T8TE 197 | T0T9TA 198 | T0T9TB 199 | T0T9TC 200 | T0T9TD 201 | T0T9TE 202 | T0TATB 203 | T0TATC 204 | T0TATD 205 | T0TATE 206 | T0TBTC 207 | T0TBTD 208 | T0TBTE 209 | T0TCTD 210 | T0TCTE 211 | T0TDTE 212 | T1T2T3 213 | T1T2T4 214 | T1T2T5 215 | T1T2T6 216 | T1T2T7 217 | T1T2T8 218 | T1T2T9 219 | T1T2TA 220 | T1T2TB 221 | T1T2TC 222 | T1T2TD 223 | T1T2TE 224 | T1T3T4 225 | T1T3T5 226 | T1T3T6 227 | T1T3T7 228 | T1T3T8 229 | T1T3T9 230 | T1T3TA 231 | T1T3TB 232 | T1T3TC 233 | T1T3TD 234 | T1T3TE 235 | T1T4T5 236 | T1T4T6 237 | T1T4T7 238 | T1T4T8 239 | T1T4T9 240 | T1T4TA 241 | T1T4TB 242 | T1T4TC 243 | T1T4TD 244 | T1T4TE 245 | T1T5T6 246 | T1T5T7 247 | T1T5T8 248 | T1T5T9 249 | T1T5TA 250 | T1T5TB 251 | T1T5TC 252 | T1T5TD 253 | T1T5TE 254 | T1T6T7 255 | T1T6T8 256 | T1T6T9 257 | T1T6TA 258 | T1T6TB 259 | T1T6TC 260 | T1T6TD 261 | T1T6TE 262 | T1T7T8 263 | T1T7T9 264 | T1T7TA 265 | T1T7TB 266 | T1T7TC 267 | T1T7TD 268 | T1T7TE 269 | T1T8T9 270 | T1T8TA 271 | T1T8TB 272 | T1T8TC 273 | T1T8TD 274 | T1T8TE 275 | T1T9TA 276 | T1T9TB 277 | T1T9TC 278 | T1T9TD 279 | T1T9TE 280 | T1TATB 281 | T1TATC 282 | T1TATD 283 | T1TATE 284 | T1TBTC 285 | T1TBTD 286 | T1TBTE 287 | T1TCTD 288 | T1TCTE 289 | T1TDTE 290 | T2T3T4 291 | T2T3T5 292 | T2T3T6 293 | T2T3T7 294 | T2T3T8 295 | T2T3T9 296 | T2T3TA 297 | T2T3TB 298 | T2T3TC 299 | T2T3TD 300 | T2T3TE 301 | T2T4T5 302 | T2T4T6 303 | T2T4T7 304 | T2T4T8 305 | T2T4T9 306 | T2T4TA 307 | T2T4TB 308 | T2T4TC 309 | T2T4TD 310 | T2T4TE 311 | T2T5T6 312 | T2T5T7 313 | T2T5T8 314 | T2T5T9 315 | T2T5TA 316 | T2T5TB 317 | T2T5TC 318 | T2T5TD 319 | T2T5TE 320 | T2T6T7 321 | T2T6T8 322 | T2T6T9 323 | T2T6TA 324 | T2T6TB 325 | T2T6TC 326 | T2T6TD 327 | T2T6TE 328 | T2T7T8 329 | T2T7T9 330 | T2T7TA 331 | T2T7TB 332 | T2T7TC 333 | T2T7TD 334 | T2T7TE 335 | T2T8T9 336 | T2T8TA 337 | T2T8TB 338 | T2T8TC 339 | T2T8TD 340 | T2T8TE 341 | T2T9TA 342 | T2T9TB 343 | T2T9TC 344 | T2T9TD 345 | T2T9TE 346 | T2TATB 347 | T2TATC 348 | T2TATD 349 | T2TATE 350 | T2TBTC 351 | T2TBTD 352 | T2TBTE 353 | T2TCTD 354 | T2TCTE 355 | T2TDTE 356 | T3T4T5 357 | T3T4T6 358 | T3T4T7 359 | T3T4T8 360 | T3T4T9 361 | T3T4TA 362 | T3T4TB 363 | T3T4TC 364 | T3T4TD 365 | T3T4TE 366 | T3T5T6 367 | T3T5T7 368 | T3T5T8 369 | T3T5T9 370 | T3T5TA 371 | T3T5TB 372 | T3T5TC 373 | T3T5TD 374 | T3T5TE 375 | T3T6T7 376 | T3T6T8 377 | T3T6T9 378 | T3T6TA 379 | T3T6TB 380 | T3T6TC 381 | T3T6TD 382 | T3T6TE 383 | T3T7T8 384 | T3T7T9 385 | T3T7TA 386 | T3T7TB 387 | T3T7TC 388 | T3T7TD 389 | T3T7TE 390 | T3T8T9 391 | T3T8TA 392 | T3T8TB 393 | T3T8TC 394 | T3T8TD 395 | T3T8TE 396 | T3T9TA 397 | T3T9TB 398 | T3T9TC 399 | T3T9TD 400 | T3T9TE 401 | T3TATB 402 | T3TATC 403 | T3TATD 404 | T3TATE 405 | T3TBTC 406 | T3TBTD 407 | T3TBTE 408 | T3TCTD 409 | T3TCTE 410 | T3TDTE 411 | T4T5T6 412 | T4T5T7 413 | T4T5T8 414 | T4T5T9 415 | T4T5TA 416 | T4T5TB 417 | T4T5TC 418 | T4T5TD 419 | T4T5TE 420 | T4T6T7 421 | T4T6T8 422 | T4T6T9 423 | T4T6TA 424 | T4T6TB 425 | T4T6TC 426 | T4T6TD 427 | T4T6TE 428 | T4T7T8 429 | T4T7T9 430 | T4T7TA 431 | T4T7TB 432 | T4T7TC 433 | T4T7TD 434 | T4T7TE 435 | T4T8T9 436 | T4T8TA 437 | T4T8TB 438 | T4T8TC 439 | T4T8TD 440 | T4T8TE 441 | T4T9TA 442 | T4T9TB 443 | T4T9TC 444 | T4T9TD 445 | T4T9TE 446 | T4TATB 447 | T4TATC 448 | T4TATD 449 | T4TATE 450 | T4TBTC 451 | T4TBTD 452 | T4TBTE 453 | T4TCTD 454 | T4TCTE 455 | T4TDTE 456 | T5T6T7 457 | T5T6T8 458 | T5T6T9 459 | T5T6TA 460 | T5T6TB 461 | T5T6TC 462 | T5T6TD 463 | T5T6TE 464 | T5T7T8 465 | T5T7T9 466 | T5T7TA 467 | T5T7TB 468 | T5T7TC 469 | T5T7TD 470 | T5T7TE 471 | T5T8T9 472 | T5T8TA 473 | T5T8TB 474 | T5T8TC 475 | T5T8TD 476 | T5T8TE 477 | T5T9TA 478 | T5T9TB 479 | T5T9TC 480 | T5T9TD 481 | T5T9TE 482 | T5TATB 483 | T5TATC 484 | T5TATD 485 | T5TATE 486 | T5TBTC 487 | T5TBTD 488 | T5TBTE 489 | T5TCTD 490 | T5TCTE 491 | T5TDTE 492 | T6T7T8 493 | T6T7T9 494 | T6T7TA 495 | T6T7TB 496 | T6T7TC 497 | T6T7TD 498 | T6T7TE 499 | T6T8T9 500 | T6T8TA 501 | T6T8TB 502 | T6T8TC 503 | T6T8TD 504 | T6T8TE 505 | T6T9TA 506 | T6T9TB 507 | T6T9TC 508 | T6T9TD 509 | T6T9TE 510 | T6TATB 511 | T6TATC 512 | T6TATD 513 | T6TATE 514 | T6TBTC 515 | T6TBTD 516 | T6TBTE 517 | T6TCTD 518 | T6TCTE 519 | T6TDTE 520 | T7T8T9 521 | T7T8TA 522 | T7T8TB 523 | T7T8TC 524 | T7T8TD 525 | T7T8TE 526 | T7T9TA 527 | T7T9TB 528 | T7T9TC 529 | T7T9TD 530 | T7T9TE 531 | T7TATB 532 | T7TATC 533 | T7TATD 534 | T7TATE 535 | T7TBTC 536 | T7TBTD 537 | T7TBTE 538 | T7TCTD 539 | T7TCTE 540 | T7TDTE 541 | T8T9TA 542 | T8T9TB 543 | T8T9TC 544 | T8T9TD 545 | T8T9TE 546 | T8TATB 547 | T8TATC 548 | T8TATD 549 | T8TATE 550 | T8TBTC 551 | T8TBTD 552 | T8TBTE 553 | T8TCTD 554 | T8TCTE 555 | T8TDTE 556 | T9TATB 557 | T9TATC 558 | T9TATD 559 | T9TATE 560 | T9TBTC 561 | T9TBTD 562 | T9TBTE 563 | T9TCTD 564 | T9TCTE 565 | T9TDTE 566 | TATBTC 567 | TATBTD 568 | TATBTE 569 | TATCTD 570 | TATCTE 571 | TATDTE 572 | TBTCTD 573 | TBTCTE 574 | TBTDTE 575 | TCTDTE 576 | T0T1T2T3 577 | T0T1T2T4 578 | T0T1T2T5 579 | T0T1T2T6 580 | T0T1T2T7 581 | T0T1T2T8 582 | T0T1T2T9 583 | T0T1T2TA 584 | T0T1T2TB 585 | T0T1T2TC 586 | T0T1T2TD 587 | T0T1T2TE 588 | T0T1T3T4 589 | T0T1T3T5 590 | T0T1T3T6 591 | T0T1T3T7 592 | T0T1T3T8 593 | T0T1T3T9 594 | T0T1T3TA 595 | T0T1T3TB 596 | T0T1T3TC 597 | T0T1T3TD 598 | T0T1T3TE 599 | T0T1T4T5 600 | T0T1T4T6 601 | T0T1T4T7 602 | T0T1T4T8 603 | T0T1T4T9 604 | T0T1T4TA 605 | T0T1T4TB 606 | T0T1T4TC 607 | T0T1T4TD 608 | T0T1T4TE 609 | T0T1T5T6 610 | T0T1T5T7 611 | T0T1T5T8 612 | T0T1T5T9 613 | T0T1T5TA 614 | T0T1T5TB 615 | T0T1T5TC 616 | T0T1T5TD 617 | T0T1T5TE 618 | T0T1T6T7 619 | T0T1T6T8 620 | T0T1T6T9 621 | T0T1T6TA 622 | T0T1T6TB 623 | T0T1T6TC 624 | T0T1T6TD 625 | T0T1T6TE 626 | T0T1T7T8 627 | T0T1T7T9 628 | T0T1T7TA 629 | T0T1T7TB 630 | T0T1T7TC 631 | T0T1T7TD 632 | T0T1T7TE 633 | T0T1T8T9 634 | T0T1T8TA 635 | T0T1T8TB 636 | T0T1T8TC 637 | T0T1T8TD 638 | T0T1T8TE 639 | T0T1T9TA 640 | T0T1T9TB 641 | T0T1T9TC 642 | T0T1T9TD 643 | T0T1T9TE 644 | T0T1TATB 645 | T0T1TATC 646 | T0T1TATD 647 | T0T1TATE 648 | T0T1TBTC 649 | T0T1TBTD 650 | T0T1TBTE 651 | T0T1TCTD 652 | T0T1TCTE 653 | T0T1TDTE 654 | T0T2T3T4 655 | T0T2T3T5 656 | T0T2T3T6 657 | T0T2T3T7 658 | T0T2T3T8 659 | T0T2T3T9 660 | T0T2T3TA 661 | T0T2T3TB 662 | T0T2T3TC 663 | T0T2T3TD 664 | T0T2T3TE 665 | T0T2T4T5 666 | T0T2T4T6 667 | T0T2T4T7 668 | T0T2T4T8 669 | T0T2T4T9 670 | T0T2T4TA 671 | T0T2T4TB 672 | T0T2T4TC 673 | T0T2T4TD 674 | T0T2T4TE 675 | T0T2T5T6 676 | T0T2T5T7 677 | T0T2T5T8 678 | T0T2T5T9 679 | T0T2T5TA 680 | T0T2T5TB 681 | T0T2T5TC 682 | T0T2T5TD 683 | T0T2T5TE 684 | T0T2T6T7 685 | T0T2T6T8 686 | T0T2T6T9 687 | T0T2T6TA 688 | T0T2T6TB 689 | T0T2T6TC 690 | T0T2T6TD 691 | T0T2T6TE 692 | T0T2T7T8 693 | T0T2T7T9 694 | T0T2T7TA 695 | T0T2T7TB 696 | T0T2T7TC 697 | T0T2T7TD 698 | T0T2T7TE 699 | T0T2T8T9 700 | T0T2T8TA 701 | T0T2T8TB 702 | T0T2T8TC 703 | T0T2T8TD 704 | T0T2T8TE 705 | T0T2T9TA 706 | T0T2T9TB 707 | T0T2T9TC 708 | T0T2T9TD 709 | T0T2T9TE 710 | T0T2TATB 711 | T0T2TATC 712 | T0T2TATD 713 | T0T2TATE 714 | T0T2TBTC 715 | T0T2TBTD 716 | T0T2TBTE 717 | T0T2TCTD 718 | T0T2TCTE 719 | T0T2TDTE 720 | T0T3T4T5 721 | T0T3T4T6 722 | T0T3T4T7 723 | T0T3T4T8 724 | T0T3T4T9 725 | T0T3T4TA 726 | T0T3T4TB 727 | T0T3T4TC 728 | T0T3T4TD 729 | T0T3T4TE 730 | T0T3T5T6 731 | T0T3T5T7 732 | T0T3T5T8 733 | T0T3T5T9 734 | T0T3T5TA 735 | T0T3T5TB 736 | T0T3T5TC 737 | T0T3T5TD 738 | T0T3T5TE 739 | T0T3T6T7 740 | T0T3T6T8 741 | T0T3T6T9 742 | T0T3T6TA 743 | T0T3T6TB 744 | T0T3T6TC 745 | T0T3T6TD 746 | T0T3T6TE 747 | T0T3T7T8 748 | T0T3T7T9 749 | T0T3T7TA 750 | T0T3T7TB 751 | T0T3T7TC 752 | T0T3T7TD 753 | T0T3T7TE 754 | T0T3T8T9 755 | T0T3T8TA 756 | T0T3T8TB 757 | T0T3T8TC 758 | T0T3T8TD 759 | T0T3T8TE 760 | T0T3T9TA 761 | T0T3T9TB 762 | T0T3T9TC 763 | T0T3T9TD 764 | T0T3T9TE 765 | T0T3TATB 766 | T0T3TATC 767 | T0T3TATD 768 | T0T3TATE 769 | T0T3TBTC 770 | T0T3TBTD 771 | T0T3TBTE 772 | T0T3TCTD 773 | T0T3TCTE 774 | T0T3TDTE 775 | T0T4T5T6 776 | T0T4T5T7 777 | T0T4T5T8 778 | T0T4T5T9 779 | T0T4T5TA 780 | T0T4T5TB 781 | T0T4T5TC 782 | T0T4T5TD 783 | T0T4T5TE 784 | T0T4T6T7 785 | T0T4T6T8 786 | T0T4T6T9 787 | T0T4T6TA 788 | T0T4T6TB 789 | T0T4T6TC 790 | T0T4T6TD 791 | T0T4T6TE 792 | T0T4T7T8 793 | T0T4T7T9 794 | T0T4T7TA 795 | T0T4T7TB 796 | T0T4T7TC 797 | T0T4T7TD 798 | T0T4T7TE 799 | T0T4T8T9 800 | T0T4T8TA 801 | T0T4T8TB 802 | T0T4T8TC 803 | T0T4T8TD 804 | T0T4T8TE 805 | T0T4T9TA 806 | T0T4T9TB 807 | T0T4T9TC 808 | T0T4T9TD 809 | T0T4T9TE 810 | T0T4TATB 811 | T0T4TATC 812 | T0T4TATD 813 | T0T4TATE 814 | T0T4TBTC 815 | T0T4TBTD 816 | T0T4TBTE 817 | T0T4TCTD 818 | T0T4TCTE 819 | T0T4TDTE 820 | T0T5T6T7 821 | T0T5T6T8 822 | T0T5T6T9 823 | T0T5T6TA 824 | T0T5T6TB 825 | T0T5T6TC 826 | T0T5T6TD 827 | T0T5T6TE 828 | T0T5T7T8 829 | T0T5T7T9 830 | T0T5T7TA 831 | T0T5T7TB 832 | T0T5T7TC 833 | T0T5T7TD 834 | T0T5T7TE 835 | T0T5T8T9 836 | T0T5T8TA 837 | T0T5T8TB 838 | T0T5T8TC 839 | T0T5T8TD 840 | T0T5T8TE 841 | T0T5T9TA 842 | T0T5T9TB 843 | T0T5T9TC 844 | T0T5T9TD 845 | T0T5T9TE 846 | T0T5TATB 847 | T0T5TATC 848 | T0T5TATD 849 | T0T5TATE 850 | T0T5TBTC 851 | T0T5TBTD 852 | T0T5TBTE 853 | T0T5TCTD 854 | T0T5TCTE 855 | T0T5TDTE 856 | T0T6T7T8 857 | T0T6T7T9 858 | T0T6T7TA 859 | T0T6T7TB 860 | T0T6T7TC 861 | T0T6T7TD 862 | T0T6T7TE 863 | T0T6T8T9 864 | T0T6T8TA 865 | T0T6T8TB 866 | T0T6T8TC 867 | T0T6T8TD 868 | T0T6T8TE 869 | T0T6T9TA 870 | T0T6T9TB 871 | T0T6T9TC 872 | T0T6T9TD 873 | T0T6T9TE 874 | T0T6TATB 875 | T0T6TATC 876 | T0T6TATD 877 | T0T6TATE 878 | T0T6TBTC 879 | T0T6TBTD 880 | T0T6TBTE 881 | T0T6TCTD 882 | T0T6TCTE 883 | T0T6TDTE 884 | T0T7T8T9 885 | T0T7T8TA 886 | T0T7T8TB 887 | T0T7T8TC 888 | T0T7T8TD 889 | T0T7T8TE 890 | T0T7T9TA 891 | T0T7T9TB 892 | T0T7T9TC 893 | T0T7T9TD 894 | T0T7T9TE 895 | T0T7TATB 896 | T0T7TATC 897 | T0T7TATD 898 | T0T7TATE 899 | T0T7TBTC 900 | T0T7TBTD 901 | T0T7TBTE 902 | T0T7TCTD 903 | T0T7TCTE 904 | T0T7TDTE 905 | T0T8T9TA 906 | T0T8T9TB 907 | T0T8T9TC 908 | T0T8T9TD 909 | T0T8T9TE 910 | T0T8TATB 911 | T0T8TATC 912 | T0T8TATD 913 | T0T8TATE 914 | T0T8TBTC 915 | T0T8TBTD 916 | T0T8TBTE 917 | T0T8TCTD 918 | T0T8TCTE 919 | T0T8TDTE 920 | T0T9TATB 921 | T0T9TATC 922 | T0T9TATD 923 | T0T9TATE 924 | T0T9TBTC 925 | T0T9TBTD 926 | T0T9TBTE 927 | T0T9TCTD 928 | T0T9TCTE 929 | T0T9TDTE 930 | T0TATBTC 931 | T0TATBTD 932 | T0TATBTE 933 | T0TATCTD 934 | T0TATCTE 935 | T0TATDTE 936 | T0TBTCTD 937 | T0TBTCTE 938 | T0TBTDTE 939 | T0TCTDTE 940 | T1T2T3T4 941 | T1T2T3T5 942 | T1T2T3T6 943 | T1T2T3T7 944 | T1T2T3T8 945 | T1T2T3T9 946 | T1T2T3TA 947 | T1T2T3TB 948 | T1T2T3TC 949 | T1T2T3TD 950 | T1T2T3TE 951 | T1T2T4T5 952 | T1T2T4T6 953 | T1T2T4T7 954 | T1T2T4T8 955 | T1T2T4T9 956 | T1T2T4TA 957 | T1T2T4TB 958 | T1T2T4TC 959 | T1T2T4TD 960 | T1T2T4TE 961 | T1T2T5T6 962 | T1T2T5T7 963 | T1T2T5T8 964 | T1T2T5T9 965 | T1T2T5TA 966 | T1T2T5TB 967 | T1T2T5TC 968 | T1T2T5TD 969 | T1T2T5TE 970 | T1T2T6T7 971 | T1T2T6T8 972 | T1T2T6T9 973 | T1T2T6TA 974 | T1T2T6TB 975 | T1T2T6TC 976 | T1T2T6TD 977 | T1T2T6TE 978 | T1T2T7T8 979 | T1T2T7T9 980 | T1T2T7TA 981 | T1T2T7TB 982 | T1T2T7TC 983 | T1T2T7TD 984 | T1T2T7TE 985 | T1T2T8T9 986 | T1T2T8TA 987 | T1T2T8TB 988 | T1T2T8TC 989 | T1T2T8TD 990 | T1T2T8TE 991 | T1T2T9TA 992 | T1T2T9TB 993 | T1T2T9TC 994 | T1T2T9TD 995 | T1T2T9TE 996 | T1T2TATB 997 | T1T2TATC 998 | T1T2TATD 999 | T1T2TATE 1000 | T1T2TBTC 1001 | T1T2TBTD 1002 | T1T2TBTE 1003 | T1T2TCTD 1004 | T1T2TCTE 1005 | T1T2TDTE 1006 | T1T3T4T5 1007 | T1T3T4T6 1008 | T1T3T4T7 1009 | T1T3T4T8 1010 | T1T3T4T9 1011 | T1T3T4TA 1012 | T1T3T4TB 1013 | T1T3T4TC 1014 | T1T3T4TD 1015 | T1T3T4TE 1016 | T1T3T5T6 1017 | T1T3T5T7 1018 | T1T3T5T8 1019 | T1T3T5T9 1020 | T1T3T5TA 1021 | T1T3T5TB 1022 | T1T3T5TC 1023 | T1T3T5TD 1024 | T1T3T5TE 1025 | T1T3T6T7 1026 | T1T3T6T8 1027 | T1T3T6T9 1028 | T1T3T6TA 1029 | T1T3T6TB 1030 | T1T3T6TC 1031 | T1T3T6TD 1032 | T1T3T6TE 1033 | T1T3T7T8 1034 | T1T3T7T9 1035 | T1T3T7TA 1036 | T1T3T7TB 1037 | T1T3T7TC 1038 | T1T3T7TD 1039 | T1T3T7TE 1040 | T1T3T8T9 1041 | T1T3T8TA 1042 | T1T3T8TB 1043 | T1T3T8TC 1044 | T1T3T8TD 1045 | T1T3T8TE 1046 | T1T3T9TA 1047 | T1T3T9TB 1048 | T1T3T9TC 1049 | T1T3T9TD 1050 | T1T3T9TE 1051 | T1T3TATB 1052 | T1T3TATC 1053 | T1T3TATD 1054 | T1T3TATE 1055 | T1T3TBTC 1056 | T1T3TBTD 1057 | T1T3TBTE 1058 | T1T3TCTD 1059 | T1T3TCTE 1060 | T1T3TDTE 1061 | T1T4T5T6 1062 | T1T4T5T7 1063 | T1T4T5T8 1064 | T1T4T5T9 1065 | T1T4T5TA 1066 | T1T4T5TB 1067 | T1T4T5TC 1068 | T1T4T5TD 1069 | T1T4T5TE 1070 | T1T4T6T7 1071 | T1T4T6T8 1072 | T1T4T6T9 1073 | T1T4T6TA 1074 | T1T4T6TB 1075 | T1T4T6TC 1076 | T1T4T6TD 1077 | T1T4T6TE 1078 | T1T4T7T8 1079 | T1T4T7T9 1080 | T1T4T7TA 1081 | T1T4T7TB 1082 | T1T4T7TC 1083 | T1T4T7TD 1084 | T1T4T7TE 1085 | T1T4T8T9 1086 | T1T4T8TA 1087 | T1T4T8TB 1088 | T1T4T8TC 1089 | T1T4T8TD 1090 | T1T4T8TE 1091 | T1T4T9TA 1092 | T1T4T9TB 1093 | T1T4T9TC 1094 | T1T4T9TD 1095 | T1T4T9TE 1096 | T1T4TATB 1097 | T1T4TATC 1098 | T1T4TATD 1099 | T1T4TATE 1100 | T1T4TBTC 1101 | T1T4TBTD 1102 | T1T4TBTE 1103 | T1T4TCTD 1104 | T1T4TCTE 1105 | T1T4TDTE 1106 | T1T5T6T7 1107 | T1T5T6T8 1108 | T1T5T6T9 1109 | T1T5T6TA 1110 | T1T5T6TB 1111 | T1T5T6TC 1112 | T1T5T6TD 1113 | T1T5T6TE 1114 | T1T5T7T8 1115 | T1T5T7T9 1116 | T1T5T7TA 1117 | T1T5T7TB 1118 | T1T5T7TC 1119 | T1T5T7TD 1120 | T1T5T7TE 1121 | T1T5T8T9 1122 | T1T5T8TA 1123 | T1T5T8TB 1124 | T1T5T8TC 1125 | T1T5T8TD 1126 | T1T5T8TE 1127 | T1T5T9TA 1128 | T1T5T9TB 1129 | T1T5T9TC 1130 | T1T5T9TD 1131 | T1T5T9TE 1132 | T1T5TATB 1133 | T1T5TATC 1134 | T1T5TATD 1135 | T1T5TATE 1136 | T1T5TBTC 1137 | T1T5TBTD 1138 | T1T5TBTE 1139 | T1T5TCTD 1140 | T1T5TCTE 1141 | T1T5TDTE 1142 | T1T6T7T8 1143 | T1T6T7T9 1144 | T1T6T7TA 1145 | T1T6T7TB 1146 | T1T6T7TC 1147 | T1T6T7TD 1148 | T1T6T7TE 1149 | T1T6T8T9 1150 | T1T6T8TA 1151 | T1T6T8TB 1152 | T1T6T8TC 1153 | T1T6T8TD 1154 | T1T6T8TE 1155 | T1T6T9TA 1156 | T1T6T9TB 1157 | T1T6T9TC 1158 | T1T6T9TD 1159 | T1T6T9TE 1160 | T1T6TATB 1161 | T1T6TATC 1162 | T1T6TATD 1163 | T1T6TATE 1164 | T1T6TBTC 1165 | T1T6TBTD 1166 | T1T6TBTE 1167 | T1T6TCTD 1168 | T1T6TCTE 1169 | T1T6TDTE 1170 | T1T7T8T9 1171 | T1T7T8TA 1172 | T1T7T8TB 1173 | T1T7T8TC 1174 | T1T7T8TD 1175 | T1T7T8TE 1176 | T1T7T9TA 1177 | T1T7T9TB 1178 | T1T7T9TC 1179 | T1T7T9TD 1180 | T1T7T9TE 1181 | T1T7TATB 1182 | T1T7TATC 1183 | T1T7TATD 1184 | T1T7TATE 1185 | T1T7TBTC 1186 | T1T7TBTD 1187 | T1T7TBTE 1188 | T1T7TCTD 1189 | T1T7TCTE 1190 | T1T7TDTE 1191 | T1T8T9TA 1192 | T1T8T9TB 1193 | T1T8T9TC 1194 | T1T8T9TD 1195 | T1T8T9TE 1196 | T1T8TATB 1197 | T1T8TATC 1198 | T1T8TATD 1199 | T1T8TATE 1200 | T1T8TBTC 1201 | T1T8TBTD 1202 | T1T8TBTE 1203 | T1T8TCTD 1204 | T1T8TCTE 1205 | T1T8TDTE 1206 | T1T9TATB 1207 | T1T9TATC 1208 | T1T9TATD 1209 | T1T9TATE 1210 | T1T9TBTC 1211 | T1T9TBTD 1212 | T1T9TBTE 1213 | T1T9TCTD 1214 | T1T9TCTE 1215 | T1T9TDTE 1216 | T1TATBTC 1217 | T1TATBTD 1218 | T1TATBTE 1219 | T1TATCTD 1220 | T1TATCTE 1221 | T1TATDTE 1222 | T1TBTCTD 1223 | T1TBTCTE 1224 | T1TBTDTE 1225 | T1TCTDTE 1226 | T2T3T4T5 1227 | T2T3T4T6 1228 | T2T3T4T7 1229 | T2T3T4T8 1230 | T2T3T4T9 1231 | T2T3T4TA 1232 | T2T3T4TB 1233 | T2T3T4TC 1234 | T2T3T4TD 1235 | T2T3T4TE 1236 | T2T3T5T6 1237 | T2T3T5T7 1238 | T2T3T5T8 1239 | T2T3T5T9 1240 | T2T3T5TA 1241 | T2T3T5TB 1242 | T2T3T5TC 1243 | T2T3T5TD 1244 | T2T3T5TE 1245 | T2T3T6T7 1246 | T2T3T6T8 1247 | T2T3T6T9 1248 | T2T3T6TA 1249 | T2T3T6TB 1250 | T2T3T6TC 1251 | T2T3T6TD 1252 | T2T3T6TE 1253 | T2T3T7T8 1254 | T2T3T7T9 1255 | T2T3T7TA 1256 | T2T3T7TB 1257 | T2T3T7TC 1258 | T2T3T7TD 1259 | T2T3T7TE 1260 | T2T3T8T9 1261 | T2T3T8TA 1262 | T2T3T8TB 1263 | T2T3T8TC 1264 | T2T3T8TD 1265 | T2T3T8TE 1266 | T2T3T9TA 1267 | T2T3T9TB 1268 | T2T3T9TC 1269 | T2T3T9TD 1270 | T2T3T9TE 1271 | T2T3TATB 1272 | T2T3TATC 1273 | T2T3TATD 1274 | T2T3TATE 1275 | T2T3TBTC 1276 | T2T3TBTD 1277 | T2T3TBTE 1278 | T2T3TCTD 1279 | T2T3TCTE 1280 | T2T3TDTE 1281 | T2T4T5T6 1282 | T2T4T5T7 1283 | T2T4T5T8 1284 | T2T4T5T9 1285 | T2T4T5TA 1286 | T2T4T5TB 1287 | T2T4T5TC 1288 | T2T4T5TD 1289 | T2T4T5TE 1290 | T2T4T6T7 1291 | T2T4T6T8 1292 | T2T4T6T9 1293 | T2T4T6TA 1294 | T2T4T6TB 1295 | T2T4T6TC 1296 | T2T4T6TD 1297 | T2T4T6TE 1298 | T2T4T7T8 1299 | T2T4T7T9 1300 | T2T4T7TA 1301 | T2T4T7TB 1302 | T2T4T7TC 1303 | T2T4T7TD 1304 | T2T4T7TE 1305 | T2T4T8T9 1306 | T2T4T8TA 1307 | T2T4T8TB 1308 | T2T4T8TC 1309 | T2T4T8TD 1310 | T2T4T8TE 1311 | T2T4T9TA 1312 | T2T4T9TB 1313 | T2T4T9TC 1314 | T2T4T9TD 1315 | T2T4T9TE 1316 | T2T4TATB 1317 | T2T4TATC 1318 | T2T4TATD 1319 | T2T4TATE 1320 | T2T4TBTC 1321 | T2T4TBTD 1322 | T2T4TBTE 1323 | T2T4TCTD 1324 | T2T4TCTE 1325 | T2T4TDTE 1326 | T2T5T6T7 1327 | T2T5T6T8 1328 | T2T5T6T9 1329 | T2T5T6TA 1330 | T2T5T6TB 1331 | T2T5T6TC 1332 | T2T5T6TD 1333 | T2T5T6TE 1334 | T2T5T7T8 1335 | T2T5T7T9 1336 | T2T5T7TA 1337 | T2T5T7TB 1338 | T2T5T7TC 1339 | T2T5T7TD 1340 | T2T5T7TE 1341 | T2T5T8T9 1342 | T2T5T8TA 1343 | T2T5T8TB 1344 | T2T5T8TC 1345 | T2T5T8TD 1346 | T2T5T8TE 1347 | T2T5T9TA 1348 | T2T5T9TB 1349 | T2T5T9TC 1350 | T2T5T9TD 1351 | T2T5T9TE 1352 | T2T5TATB 1353 | T2T5TATC 1354 | T2T5TATD 1355 | T2T5TATE 1356 | T2T5TBTC 1357 | T2T5TBTD 1358 | T2T5TBTE 1359 | T2T5TCTD 1360 | T2T5TCTE 1361 | T2T5TDTE 1362 | T2T6T7T8 1363 | T2T6T7T9 1364 | T2T6T7TA 1365 | T2T6T7TB 1366 | T2T6T7TC 1367 | T2T6T7TD 1368 | T2T6T7TE 1369 | T2T6T8T9 1370 | T2T6T8TA 1371 | T2T6T8TB 1372 | T2T6T8TC 1373 | T2T6T8TD 1374 | T2T6T8TE 1375 | T2T6T9TA 1376 | T2T6T9TB 1377 | T2T6T9TC 1378 | T2T6T9TD 1379 | T2T6T9TE 1380 | T2T6TATB 1381 | T2T6TATC 1382 | T2T6TATD 1383 | T2T6TATE 1384 | T2T6TBTC 1385 | T2T6TBTD 1386 | T2T6TBTE 1387 | T2T6TCTD 1388 | T2T6TCTE 1389 | T2T6TDTE 1390 | T2T7T8T9 1391 | T2T7T8TA 1392 | T2T7T8TB 1393 | T2T7T8TC 1394 | T2T7T8TD 1395 | T2T7T8TE 1396 | T2T7T9TA 1397 | T2T7T9TB 1398 | T2T7T9TC 1399 | T2T7T9TD 1400 | T2T7T9TE 1401 | T2T7TATB 1402 | T2T7TATC 1403 | T2T7TATD 1404 | T2T7TATE 1405 | T2T7TBTC 1406 | T2T7TBTD 1407 | T2T7TBTE 1408 | T2T7TCTD 1409 | T2T7TCTE 1410 | T2T7TDTE 1411 | T2T8T9TA 1412 | T2T8T9TB 1413 | T2T8T9TC 1414 | T2T8T9TD 1415 | T2T8T9TE 1416 | T2T8TATB 1417 | T2T8TATC 1418 | T2T8TATD 1419 | T2T8TATE 1420 | T2T8TBTC 1421 | T2T8TBTD 1422 | T2T8TBTE 1423 | T2T8TCTD 1424 | T2T8TCTE 1425 | T2T8TDTE 1426 | T2T9TATB 1427 | T2T9TATC 1428 | T2T9TATD 1429 | T2T9TATE 1430 | T2T9TBTC 1431 | T2T9TBTD 1432 | T2T9TBTE 1433 | T2T9TCTD 1434 | T2T9TCTE 1435 | T2T9TDTE 1436 | T2TATBTC 1437 | T2TATBTD 1438 | T2TATBTE 1439 | T2TATCTD 1440 | T2TATCTE 1441 | T2TATDTE 1442 | T2TBTCTD 1443 | T2TBTCTE 1444 | T2TBTDTE 1445 | T2TCTDTE 1446 | T3T4T5T6 1447 | T3T4T5T7 1448 | T3T4T5T8 1449 | T3T4T5T9 1450 | T3T4T5TA 1451 | T3T4T5TB 1452 | T3T4T5TC 1453 | T3T4T5TD 1454 | T3T4T5TE 1455 | T3T4T6T7 1456 | T3T4T6T8 1457 | T3T4T6T9 1458 | T3T4T6TA 1459 | T3T4T6TB 1460 | T3T4T6TC 1461 | T3T4T6TD 1462 | T3T4T6TE 1463 | T3T4T7T8 1464 | T3T4T7T9 1465 | T3T4T7TA 1466 | T3T4T7TB 1467 | T3T4T7TC 1468 | T3T4T7TD 1469 | T3T4T7TE 1470 | T3T4T8T9 1471 | T3T4T8TA 1472 | T3T4T8TB 1473 | T3T4T8TC 1474 | T3T4T8TD 1475 | T3T4T8TE 1476 | T3T4T9TA 1477 | T3T4T9TB 1478 | T3T4T9TC 1479 | T3T4T9TD 1480 | T3T4T9TE 1481 | T3T4TATB 1482 | T3T4TATC 1483 | T3T4TATD 1484 | T3T4TATE 1485 | T3T4TBTC 1486 | T3T4TBTD 1487 | T3T4TBTE 1488 | T3T4TCTD 1489 | T3T4TCTE 1490 | T3T4TDTE 1491 | T3T5T6T7 1492 | T3T5T6T8 1493 | T3T5T6T9 1494 | T3T5T6TA 1495 | T3T5T6TB 1496 | T3T5T6TC 1497 | T3T5T6TD 1498 | T3T5T6TE 1499 | T3T5T7T8 1500 | T3T5T7T9 1501 | T3T5T7TA 1502 | T3T5T7TB 1503 | T3T5T7TC 1504 | T3T5T7TD 1505 | T3T5T7TE 1506 | T3T5T8T9 1507 | T3T5T8TA 1508 | T3T5T8TB 1509 | T3T5T8TC 1510 | T3T5T8TD 1511 | T3T5T8TE 1512 | T3T5T9TA 1513 | T3T5T9TB 1514 | T3T5T9TC 1515 | T3T5T9TD 1516 | T3T5T9TE 1517 | T3T5TATB 1518 | T3T5TATC 1519 | T3T5TATD 1520 | T3T5TATE 1521 | T3T5TBTC 1522 | T3T5TBTD 1523 | T3T5TBTE 1524 | T3T5TCTD 1525 | T3T5TCTE 1526 | T3T5TDTE 1527 | T3T6T7T8 1528 | T3T6T7T9 1529 | T3T6T7TA 1530 | T3T6T7TB 1531 | T3T6T7TC 1532 | T3T6T7TD 1533 | T3T6T7TE 1534 | T3T6T8T9 1535 | T3T6T8TA 1536 | T3T6T8TB 1537 | T3T6T8TC 1538 | T3T6T8TD 1539 | T3T6T8TE 1540 | T3T6T9TA 1541 | T3T6T9TB 1542 | T3T6T9TC 1543 | T3T6T9TD 1544 | T3T6T9TE 1545 | T3T6TATB 1546 | T3T6TATC 1547 | T3T6TATD 1548 | T3T6TATE 1549 | T3T6TBTC 1550 | T3T6TBTD 1551 | T3T6TBTE 1552 | T3T6TCTD 1553 | T3T6TCTE 1554 | T3T6TDTE 1555 | T3T7T8T9 1556 | T3T7T8TA 1557 | T3T7T8TB 1558 | T3T7T8TC 1559 | T3T7T8TD 1560 | T3T7T8TE 1561 | T3T7T9TA 1562 | T3T7T9TB 1563 | T3T7T9TC 1564 | T3T7T9TD 1565 | T3T7T9TE 1566 | T3T7TATB 1567 | T3T7TATC 1568 | T3T7TATD 1569 | T3T7TATE 1570 | T3T7TBTC 1571 | T3T7TBTD 1572 | T3T7TBTE 1573 | T3T7TCTD 1574 | T3T7TCTE 1575 | T3T7TDTE 1576 | T3T8T9TA 1577 | T3T8T9TB 1578 | T3T8T9TC 1579 | T3T8T9TD 1580 | T3T8T9TE 1581 | T3T8TATB 1582 | T3T8TATC 1583 | T3T8TATD 1584 | T3T8TATE 1585 | T3T8TBTC 1586 | T3T8TBTD 1587 | T3T8TBTE 1588 | T3T8TCTD 1589 | T3T8TCTE 1590 | T3T8TDTE 1591 | T3T9TATB 1592 | T3T9TATC 1593 | T3T9TATD 1594 | T3T9TATE 1595 | T3T9TBTC 1596 | T3T9TBTD 1597 | T3T9TBTE 1598 | T3T9TCTD 1599 | T3T9TCTE 1600 | T3T9TDTE 1601 | T3TATBTC 1602 | T3TATBTD 1603 | T3TATBTE 1604 | T3TATCTD 1605 | T3TATCTE 1606 | T3TATDTE 1607 | T3TBTCTD 1608 | T3TBTCTE 1609 | T3TBTDTE 1610 | T3TCTDTE 1611 | T4T5T6T7 1612 | T4T5T6T8 1613 | T4T5T6T9 1614 | T4T5T6TA 1615 | T4T5T6TB 1616 | T4T5T6TC 1617 | T4T5T6TD 1618 | T4T5T6TE 1619 | T4T5T7T8 1620 | T4T5T7T9 1621 | T4T5T7TA 1622 | T4T5T7TB 1623 | T4T5T7TC 1624 | T4T5T7TD 1625 | T4T5T7TE 1626 | T4T5T8T9 1627 | T4T5T8TA 1628 | T4T5T8TB 1629 | T4T5T8TC 1630 | T4T5T8TD 1631 | T4T5T8TE 1632 | T4T5T9TA 1633 | T4T5T9TB 1634 | T4T5T9TC 1635 | T4T5T9TD 1636 | T4T5T9TE 1637 | T4T5TATB 1638 | T4T5TATC 1639 | T4T5TATD 1640 | T4T5TATE 1641 | T4T5TBTC 1642 | T4T5TBTD 1643 | T4T5TBTE 1644 | T4T5TCTD 1645 | T4T5TCTE 1646 | T4T5TDTE 1647 | T4T6T7T8 1648 | T4T6T7T9 1649 | T4T6T7TA 1650 | T4T6T7TB 1651 | T4T6T7TC 1652 | T4T6T7TD 1653 | T4T6T7TE 1654 | T4T6T8T9 1655 | T4T6T8TA 1656 | T4T6T8TB 1657 | T4T6T8TC 1658 | T4T6T8TD 1659 | T4T6T8TE 1660 | T4T6T9TA 1661 | T4T6T9TB 1662 | T4T6T9TC 1663 | T4T6T9TD 1664 | T4T6T9TE 1665 | T4T6TATB 1666 | T4T6TATC 1667 | T4T6TATD 1668 | T4T6TATE 1669 | T4T6TBTC 1670 | T4T6TBTD 1671 | T4T6TBTE 1672 | T4T6TCTD 1673 | T4T6TCTE 1674 | T4T6TDTE 1675 | T4T7T8T9 1676 | T4T7T8TA 1677 | T4T7T8TB 1678 | T4T7T8TC 1679 | T4T7T8TD 1680 | T4T7T8TE 1681 | T4T7T9TA 1682 | T4T7T9TB 1683 | T4T7T9TC 1684 | T4T7T9TD 1685 | T4T7T9TE 1686 | T4T7TATB 1687 | T4T7TATC 1688 | T4T7TATD 1689 | T4T7TATE 1690 | T4T7TBTC 1691 | T4T7TBTD 1692 | T4T7TBTE 1693 | T4T7TCTD 1694 | T4T7TCTE 1695 | T4T7TDTE 1696 | T4T8T9TA 1697 | T4T8T9TB 1698 | T4T8T9TC 1699 | T4T8T9TD 1700 | T4T8T9TE 1701 | T4T8TATB 1702 | T4T8TATC 1703 | T4T8TATD 1704 | T4T8TATE 1705 | T4T8TBTC 1706 | T4T8TBTD 1707 | T4T8TBTE 1708 | T4T8TCTD 1709 | T4T8TCTE 1710 | T4T8TDTE 1711 | T4T9TATB 1712 | T4T9TATC 1713 | T4T9TATD 1714 | T4T9TATE 1715 | T4T9TBTC 1716 | T4T9TBTD 1717 | T4T9TBTE 1718 | T4T9TCTD 1719 | T4T9TCTE 1720 | T4T9TDTE 1721 | T4TATBTC 1722 | T4TATBTD 1723 | T4TATBTE 1724 | T4TATCTD 1725 | T4TATCTE 1726 | T4TATDTE 1727 | T4TBTCTD 1728 | T4TBTCTE 1729 | T4TBTDTE 1730 | T4TCTDTE 1731 | T5T6T7T8 1732 | T5T6T7T9 1733 | T5T6T7TA 1734 | T5T6T7TB 1735 | T5T6T7TC 1736 | T5T6T7TD 1737 | T5T6T7TE 1738 | T5T6T8T9 1739 | T5T6T8TA 1740 | T5T6T8TB 1741 | T5T6T8TC 1742 | T5T6T8TD 1743 | T5T6T8TE 1744 | T5T6T9TA 1745 | T5T6T9TB 1746 | T5T6T9TC 1747 | T5T6T9TD 1748 | T5T6T9TE 1749 | T5T6TATB 1750 | T5T6TATC 1751 | T5T6TATD 1752 | T5T6TATE 1753 | T5T6TBTC 1754 | T5T6TBTD 1755 | T5T6TBTE 1756 | T5T6TCTD 1757 | T5T6TCTE 1758 | T5T6TDTE 1759 | T5T7T8T9 1760 | T5T7T8TA 1761 | T5T7T8TB 1762 | T5T7T8TC 1763 | T5T7T8TD 1764 | T5T7T8TE 1765 | T5T7T9TA 1766 | T5T7T9TB 1767 | T5T7T9TC 1768 | T5T7T9TD 1769 | T5T7T9TE 1770 | T5T7TATB 1771 | T5T7TATC 1772 | T5T7TATD 1773 | T5T7TATE 1774 | T5T7TBTC 1775 | T5T7TBTD 1776 | T5T7TBTE 1777 | T5T7TCTD 1778 | T5T7TCTE 1779 | T5T7TDTE 1780 | T5T8T9TA 1781 | T5T8T9TB 1782 | T5T8T9TC 1783 | T5T8T9TD 1784 | T5T8T9TE 1785 | T5T8TATB 1786 | T5T8TATC 1787 | T5T8TATD 1788 | T5T8TATE 1789 | T5T8TBTC 1790 | T5T8TBTD 1791 | T5T8TBTE 1792 | T5T8TCTD 1793 | T5T8TCTE 1794 | T5T8TDTE 1795 | T5T9TATB 1796 | T5T9TATC 1797 | T5T9TATD 1798 | T5T9TATE 1799 | T5T9TBTC 1800 | T5T9TBTD 1801 | T5T9TBTE 1802 | T5T9TCTD 1803 | T5T9TCTE 1804 | T5T9TDTE 1805 | T5TATBTC 1806 | T5TATBTD 1807 | T5TATBTE 1808 | T5TATCTD 1809 | T5TATCTE 1810 | T5TATDTE 1811 | T5TBTCTD 1812 | T5TBTCTE 1813 | T5TBTDTE 1814 | T5TCTDTE 1815 | T6T7T8T9 1816 | T6T7T8TA 1817 | T6T7T8TB 1818 | T6T7T8TC 1819 | T6T7T8TD 1820 | T6T7T8TE 1821 | T6T7T9TA 1822 | T6T7T9TB 1823 | T6T7T9TC 1824 | T6T7T9TD 1825 | T6T7T9TE 1826 | T6T7TATB 1827 | T6T7TATC 1828 | T6T7TATD 1829 | T6T7TATE 1830 | T6T7TBTC 1831 | T6T7TBTD 1832 | T6T7TBTE 1833 | T6T7TCTD 1834 | T6T7TCTE 1835 | T6T7TDTE 1836 | T6T8T9TA 1837 | T6T8T9TB 1838 | T6T8T9TC 1839 | T6T8T9TD 1840 | T6T8T9TE 1841 | T6T8TATB 1842 | T6T8TATC 1843 | T6T8TATD 1844 | T6T8TATE 1845 | T6T8TBTC 1846 | T6T8TBTD 1847 | T6T8TBTE 1848 | T6T8TCTD 1849 | T6T8TCTE 1850 | T6T8TDTE 1851 | T6T9TATB 1852 | T6T9TATC 1853 | T6T9TATD 1854 | T6T9TATE 1855 | T6T9TBTC 1856 | T6T9TBTD 1857 | T6T9TBTE 1858 | T6T9TCTD 1859 | T6T9TCTE 1860 | T6T9TDTE 1861 | T6TATBTC 1862 | T6TATBTD 1863 | T6TATBTE 1864 | T6TATCTD 1865 | T6TATCTE 1866 | T6TATDTE 1867 | T6TBTCTD 1868 | T6TBTCTE 1869 | T6TBTDTE 1870 | T6TCTDTE 1871 | T7T8T9TA 1872 | T7T8T9TB 1873 | T7T8T9TC 1874 | T7T8T9TD 1875 | T7T8T9TE 1876 | T7T8TATB 1877 | T7T8TATC 1878 | T7T8TATD 1879 | T7T8TATE 1880 | T7T8TBTC 1881 | T7T8TBTD 1882 | T7T8TBTE 1883 | T7T8TCTD 1884 | T7T8TCTE 1885 | T7T8TDTE 1886 | T7T9TATB 1887 | T7T9TATC 1888 | T7T9TATD 1889 | T7T9TATE 1890 | T7T9TBTC 1891 | T7T9TBTD 1892 | T7T9TBTE 1893 | T7T9TCTD 1894 | T7T9TCTE 1895 | T7T9TDTE 1896 | T7TATBTC 1897 | T7TATBTD 1898 | T7TATBTE 1899 | T7TATCTD 1900 | T7TATCTE 1901 | T7TATDTE 1902 | T7TBTCTD 1903 | T7TBTCTE 1904 | T7TBTDTE 1905 | T7TCTDTE 1906 | T8T9TATB 1907 | T8T9TATC 1908 | T8T9TATD 1909 | T8T9TATE 1910 | T8T9TBTC 1911 | T8T9TBTD 1912 | T8T9TBTE 1913 | T8T9TCTD 1914 | T8T9TCTE 1915 | T8T9TDTE 1916 | T8TATBTC 1917 | T8TATBTD 1918 | T8TATBTE 1919 | T8TATCTD 1920 | T8TATCTE 1921 | T8TATDTE 1922 | T8TBTCTD 1923 | T8TBTCTE 1924 | T8TBTDTE 1925 | T8TCTDTE 1926 | T9TATBTC 1927 | T9TATBTD 1928 | T9TATBTE 1929 | T9TATCTD 1930 | T9TATCTE 1931 | T9TATDTE 1932 | T9TBTCTD 1933 | T9TBTCTE 1934 | T9TBTDTE 1935 | T9TCTDTE 1936 | TATBTCTD 1937 | TATBTCTE 1938 | TATBTDTE 1939 | TATCTDTE 1940 | TBTCTDTE 1941 | -------------------------------------------------------------------------------- /stats/md5.hash.pot.stats: -------------------------------------------------------------------------------- 1 | [*] Analyzing passwords in [/opt/hat/l00t/md5.hash.pot.format1] 2 | [+] Analyzing 100% (1/1) of passwords 3 | [*] Statistics below is relative to the number of analyzed passwords, not total number of passwords 4 | 5 | [*] Length: 6 | [+] 7: 100% (1) 7 | 8 | [*] Character-set: 9 | [+] loweralpha: 100% (1) 10 | 11 | [*] Password complexity: 12 | [+] digit: min(0) max(0) 13 | [+] lower: min(7) max(7) 14 | [+] upper: min(0) max(0) 15 | [+] special: min(0) max(0) 16 | 17 | [*] Simple Masks: 18 | [+] string: 100% (1) 19 | 20 | [*] Advanced Masks: 21 | [+] ?l?l?l?l?l?l?l: 100% (1) 22 | -------------------------------------------------------------------------------- /tools/Gemfile: -------------------------------------------------------------------------------- 1 | source 'https://rubygems.org' 2 | gem 'nokogiri' 3 | gem 'spider' 4 | gem 'mini_exiftool' 5 | gem 'zip' 6 | gem 'mime' 7 | gem 'mime-types' 8 | -------------------------------------------------------------------------------- /tools/cap2hccapx.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sp00ks-git/hat/718d7c4a0ae0197843d5ef52bb0bfdd79c11cd39/tools/cap2hccapx.bin -------------------------------------------------------------------------------- /tools/cewl.rb: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env ruby 2 | #encoding: UTF-8 3 | 4 | # == CeWL: Custom Word List Generator 5 | # 6 | # CeWL will spider a target site and generate the following lists: 7 | # 8 | # * A word list of all unique words found on the target site 9 | # * A list of all email addresses found in mailto links 10 | # * A list of usernames/author details from meta data found in any documents on the site 11 | # * Groups of words up to the specified group size 12 | # 13 | # URL: The site to spider. 14 | # 15 | # Author:: Robin Wood (robin@digi.ninja) 16 | # Copyright:: Copyright (c) Robin Wood 2018 17 | # Licence:: CC-BY-SA 2.0 or GPL-3+ 18 | # 19 | 20 | VERSION = "5.5.0 (Grouping)" 21 | 22 | puts "CeWL #{VERSION} Robin Wood (robin@digi.ninja) (https://digi.ninja/)\n" 23 | 24 | begin 25 | require 'getoptlong' 26 | require 'spider' 27 | require 'nokogiri' 28 | require 'net/http' 29 | rescue LoadError => e 30 | # Catch error and provide feedback on installing gem 31 | if e.to_s =~ /cannot load such file -- (.*)/ 32 | missing_gem = $1 33 | puts "\nError: #{missing_gem} gem not installed\n" 34 | puts " Run 'bundle install' to install all the required gems\n\n" 35 | exit 2 36 | else 37 | puts "There was an error loading the gems:\n" 38 | puts e.to_s 39 | exit 2 40 | end 41 | end 42 | 43 | require_relative 'cewl_lib' 44 | 45 | # Doing this so I can override the allowed? function which normally checks 46 | # the robots.txt file 47 | class MySpider a_url}, [], rules, []) 100 | 101 | a_spider.headers = @@headers 102 | 103 | a_spider.auth_type = @@auth_type 104 | a_spider.auth_user = @@auth_user 105 | a_spider.auth_password = @@auth_password 106 | 107 | a_spider.proxy_host = @@proxy_host 108 | a_spider.proxy_port = @@proxy_port 109 | a_spider.proxy_username = @@proxy_username 110 | a_spider.proxy_password = @@proxy_password 111 | 112 | a_spider.verbose = @@verbose 113 | a_spider.debug = @@debug 114 | block.call(a_spider) 115 | a_spider.start! 116 | end 117 | end 118 | 119 | # My version of the spider class which allows all files 120 | # to be processed 121 | class MySpiderInstance a_next_url 184 | end 185 | #exit if interrupted 186 | end 187 | 188 | @teardown.call(a_url) unless @teardown.nil? 189 | throw :ctrl_c if @interrupt 190 | end 191 | end 192 | end while !@next_urls.empty? 193 | end 194 | 195 | def get_page(uri, &block) #:nodoc: 196 | @seen << uri 197 | 198 | trap("SIGINT") { puts 'Hold on, stopping here ...'; @interrupt = true } 199 | begin 200 | if @proxy_host.nil? 201 | http = Net::HTTP.new(uri.host, uri.port) 202 | 203 | if uri.scheme == 'https' 204 | http.use_ssl = true 205 | http.verify_mode = OpenSSL::SSL::VERIFY_NONE 206 | end 207 | else 208 | proxy = Net::HTTP::Proxy(@proxy_host, @proxy_port, @proxy_username, @proxy_password) 209 | begin 210 | if uri.scheme == 'https' 211 | http = proxy.start(uri.host, uri.port, :use_ssl => true, :verify_mode => OpenSSL::SSL::VERIFY_NONE) 212 | else 213 | http = proxy.start(uri.host, uri.port) 214 | end 215 | rescue => e 216 | puts "\nFailed to connect to the proxy (#{@proxy_host}:#{@proxy_port})\n\n" 217 | exit 2 218 | end 219 | end 220 | 221 | req = Net::HTTP::Get.new(uri.request_uri) 222 | @headers.each_pair do |header, value| 223 | req[header] = value 224 | end 225 | 226 | if @auth_type 227 | case @auth_type 228 | when "digest" 229 | uri.user = @auth_user 230 | uri.password = @auth_password 231 | 232 | res = http.request req 233 | 234 | if res['www-authenticate'] 235 | digest_auth = Net::HTTP::DigestAuth.new 236 | auth = digest_auth.auth_header uri, res['www-authenticate'], 'GET' 237 | 238 | req = Net::HTTP::Get.new uri.request_uri 239 | req.add_field 'Authorization', auth 240 | end 241 | 242 | when "basic" 243 | req.basic_auth @auth_user, @auth_password 244 | end 245 | end 246 | 247 | res = http.request(req) 248 | 249 | if res.redirect? 250 | puts "Redirect URL" if @debug 251 | base_url = uri.to_s[0, uri.to_s.rindex('/')] 252 | new_url = URI.parse(construct_complete_url(base_url, res['Location'])) 253 | 254 | # If auth is used then a name:pass@ gets added, this messes the tree 255 | # up so easiest to just remove it 256 | current_uri = uri.to_s.gsub(/:\/\/[^:]*:[^@]*@/, "://") 257 | @next_urls.push current_uri => new_url.to_s 258 | elsif res.code == "401" 259 | puts "Authentication required, can't continue on this branch - #{uri}" if @verbose 260 | else 261 | block.call(res) 262 | end 263 | rescue Zlib::DataError => e 264 | puts "Error in Zlib decompressing data on #{uri}, moving on regardless" 265 | rescue SocketError, Errno::EHOSTUNREACH => e 266 | puts "Couldn't hit the site #{uri}, moving on" 267 | rescue NoMethodError => e 268 | if @verbose 269 | puts "Unable to process URL" 270 | puts "Message is #{e.to_s}" 271 | puts e.backtrace 272 | end 273 | rescue => e 274 | puts "\nUnable to connect to the site (#{uri.scheme}://#{uri.host}:#{uri.port}#{uri.request_uri})" 275 | 276 | if @verbose 277 | puts "\nThe following error may help:" 278 | puts e.to_s 279 | puts e.backtrace 280 | puts "\nCaller" 281 | puts caller 282 | else 283 | puts "Run in verbose mode (-v) for more information" 284 | end 285 | 286 | puts "\n\n" 287 | end 288 | end 289 | 290 | # Overriding so that I can get it to ignore direct names - i.e. #name 291 | def construct_complete_url(base_url, additional_url, parsed_additional_url = nil) #:nodoc: 292 | return nil if additional_url =~ /^#/ 293 | 294 | parsed_additional_url ||= URI.parse(additional_url) 295 | if parsed_additional_url.scheme.nil? 296 | u = base_url.is_a?(URI) ? base_url : URI.parse(base_url) 297 | if additional_url[0].chr == '/' 298 | url = "#{u.scheme}://#{u.host}:#{u.port}#{additional_url}" 299 | elsif u.path.nil? || u.path == '' 300 | url = "#{u.scheme}://#{u.host}:#{u.port}/#{additional_url}" 301 | elsif u.path[0].chr == '/' 302 | url = "#{u.scheme}://#{u.host}:#{u.port}#{u.path}/#{additional_url}" 303 | else 304 | url = "#{u.scheme}://#{u.host}:#{u.port}/#{u.path}/#{additional_url}" 305 | end 306 | else 307 | url = additional_url 308 | end 309 | return url 310 | end 311 | 312 | # Overriding the original spider one as it doesn't find hrefs very well 313 | def generate_next_urls(a_url, resp) #:nodoc: 314 | if @debug 315 | puts "a_url = #{a_url}" 316 | puts "resp = #{resp}" 317 | end 318 | web_page = resp.body 319 | if URI.parse(a_url).path.empty? 320 | base_url = a_url 321 | else 322 | base_url = a_url[0, a_url.rindex('/')] 323 | end 324 | puts "base_url: #{base_url}" if @debug 325 | 326 | doc = Nokogiri::HTML(web_page) 327 | links = doc.css('a').map { |a| a['href'] } 328 | 329 | puts "links = #{links.inspect}" if @debug 330 | links.map do |link| 331 | begin 332 | if link.nil? 333 | nil 334 | else 335 | begin 336 | parsed_link = URI.parse(link) 337 | parsed_link.fragment == '#' ? nil : construct_complete_url(base_url, link, parsed_link) 338 | rescue 339 | nil 340 | end 341 | end 342 | rescue => e 343 | puts "\nThere was an error generating URL list" 344 | puts "Error: #{e.inspect}" 345 | puts e.backtrace 346 | exit 2 347 | end 348 | end.compact 349 | end 350 | end 351 | 352 | # A node for a tree 353 | class TreeNode 354 | attr :value 355 | attr :depth 356 | attr :key 357 | attr :visited, true 358 | 359 | def initialize(key, value, depth) 360 | @key = key 361 | @value = value 362 | @depth = depth 363 | @visited = false 364 | end 365 | 366 | def to_s 367 | if key.nil? 368 | return "key=nil value=#{@value} depth=#{@depth.to_s} visited=#{@visited.to_s}" 369 | else 370 | return "key=#{@key} value=#{@value} depth=#{@depth.to_s} visited=#{@visited.to_s}" 371 | end 372 | end 373 | 374 | def to_url_hash 375 | return({@key => @value}) 376 | end 377 | end 378 | 379 | # A tree structure 380 | class Tree 381 | attr :data 382 | attr_writer :debug 383 | attr_writer :max_depth 384 | @children 385 | 386 | # Get the maximum depth the tree can grow to 387 | def max_depth 388 | @max_depth 389 | end 390 | 391 | # Set the max depth the tree can grow to 392 | def max_depth=(val) 393 | @max_depth = Integer(val) 394 | end 395 | 396 | # As this is used to work out if there are any more nodes to process it isn't a true empty 397 | def empty? 398 | if !@data.visited 399 | return false 400 | else 401 | @children.each { |node| 402 | return false if !node.data.visited 403 | } 404 | end 405 | return true 406 | end 407 | 408 | # The constructor 409 | def initialize(key=nil, value=nil, depth=0, debug=false) 410 | @data = TreeNode.new(key, value, depth) 411 | @children = [] 412 | @max_depth = 2 413 | end 414 | 415 | # Itterator 416 | def each 417 | yield @data 418 | @children.each do |child_node| 419 | child_node.each { |e| yield e } 420 | end 421 | end 422 | 423 | # Remove an item from the tree 424 | def pop 425 | if !@data.visited 426 | @data.visited = true 427 | return @data.to_url_hash 428 | else 429 | @children.each { |node| 430 | if !node.data.visited 431 | node.data.visited = true 432 | return node.data.to_url_hash 433 | end 434 | } 435 | end 436 | return nil 437 | end 438 | 439 | # Push an item onto the tree 440 | def push(value) 441 | puts "Pushing #{value}" if @debug 442 | key = value.keys.first 443 | value = value.values_at(key).first 444 | 445 | if key.nil? 446 | @data = TreeNode.new(key, value, 0) 447 | else 448 | # If the depth is 0 then don't add anything to the tree 449 | return if @max_depth == 0 450 | if key == @data.value 451 | child = Tree.new(key, value, @data.depth + 1, @debug) 452 | @children << child 453 | else 454 | @children.each { |node| 455 | if node.data.value == key && node.data.depth<@max_depth 456 | child = Tree.new(key, value, node.data.depth + 1, @debug) 457 | @children << child 458 | end 459 | } 460 | end 461 | end 462 | end 463 | end 464 | 465 | opts = GetoptLong.new( 466 | ['--help', '-h', GetoptLong::NO_ARGUMENT], 467 | ['--keep', '-k', GetoptLong::NO_ARGUMENT], 468 | ['--depth', '-d', GetoptLong::REQUIRED_ARGUMENT], 469 | ['--min_word_length', "-m", GetoptLong::REQUIRED_ARGUMENT], 470 | ['--no-words', "-n", GetoptLong::NO_ARGUMENT], 471 | ['--groups', "-g", GetoptLong::REQUIRED_ARGUMENT], 472 | ['--offsite', "-o", GetoptLong::NO_ARGUMENT], 473 | ['--exclude', GetoptLong::REQUIRED_ARGUMENT], 474 | ['--allowed', GetoptLong::REQUIRED_ARGUMENT], 475 | ['--write', "-w", GetoptLong::REQUIRED_ARGUMENT], 476 | ['--ua', "-u", GetoptLong::REQUIRED_ARGUMENT], 477 | ['--meta-temp-dir', GetoptLong::REQUIRED_ARGUMENT], 478 | ['--meta_file', GetoptLong::REQUIRED_ARGUMENT], 479 | ['--email_file', GetoptLong::REQUIRED_ARGUMENT], 480 | ['--lowercase', GetoptLong::NO_ARGUMENT], 481 | ['--with-numbers', GetoptLong::NO_ARGUMENT], 482 | ['--convert-umlauts', GetoptLong::NO_ARGUMENT], 483 | ['--meta', "-a", GetoptLong::NO_ARGUMENT], 484 | ['--email', "-e", GetoptLong::NO_ARGUMENT], 485 | ['--count', '-c', GetoptLong::NO_ARGUMENT], 486 | ['--auth_user', GetoptLong::REQUIRED_ARGUMENT], 487 | ['--auth_pass', GetoptLong::REQUIRED_ARGUMENT], 488 | ['--auth_type', GetoptLong::REQUIRED_ARGUMENT], 489 | ['--header', "-H", GetoptLong::REQUIRED_ARGUMENT], 490 | ['--proxy_host', GetoptLong::REQUIRED_ARGUMENT], 491 | ['--proxy_port', GetoptLong::REQUIRED_ARGUMENT], 492 | ['--proxy_username', GetoptLong::REQUIRED_ARGUMENT], 493 | ['--proxy_password', GetoptLong::REQUIRED_ARGUMENT], 494 | ["--verbose", "-v", GetoptLong::NO_ARGUMENT], 495 | ["--debug", GetoptLong::NO_ARGUMENT] 496 | ) 497 | 498 | # Display the usage 499 | def usage 500 | puts "Usage: cewl [OPTIONS] ... 501 | 502 | OPTIONS: 503 | -h, --help: Show help. 504 | -k, --keep: Keep the downloaded file. 505 | -d ,--depth : Depth to spider to, default 2. 506 | -m, --min_word_length: Minimum word length, default 3. 507 | -o, --offsite: Let the spider visit other sites. 508 | --exclude: A file containing a list of paths to exclude 509 | --allowed: A regex pattern that path must match to be followed 510 | -w, --write: Write the output to the file. 511 | -u, --ua : User agent to send. 512 | -n, --no-words: Don't output the wordlist. 513 | -g , --groups : Return groups of words as well 514 | --lowercase: Lowercase all parsed words 515 | --with-numbers: Accept words with numbers in as well as just letters 516 | --convert-umlauts: Convert common ISO-8859-1 (Latin-1) umlauts (ä-ae, ö-oe, ü-ue, ß-ss) 517 | -a, --meta: include meta data. 518 | --meta_file file: Output file for meta data. 519 | -e, --email: Include email addresses. 520 | --email_file : Output file for email addresses. 521 | --meta-temp-dir : The temporary directory used by exiftool when parsing files, default /tmp. 522 | -c, --count: Show the count for each word found. 523 | -v, --verbose: Verbose. 524 | --debug: Extra debug information. 525 | 526 | Authentication 527 | --auth_type: Digest or basic. 528 | --auth_user: Authentication username. 529 | --auth_pass: Authentication password. 530 | 531 | Proxy Support 532 | --proxy_host: Proxy host. 533 | --proxy_port: Proxy port, default 8080. 534 | --proxy_username: Username for proxy, if required. 535 | --proxy_password: Password for proxy, if required. 536 | 537 | Headers 538 | --header, -H: In format name:value - can pass multiple. 539 | 540 | : The site to spider. 541 | 542 | " 543 | exit 0 544 | end 545 | 546 | debug = false 547 | verbose = false 548 | ua = nil 549 | url = nil 550 | outfile = nil 551 | email_outfile = nil 552 | meta_outfile = nil 553 | offsite = false 554 | exclude_array = [] 555 | allowed_pattern = nil 556 | depth = 2 557 | min_word_length = 3 558 | email = false 559 | meta = false 560 | wordlist = true 561 | groups = -1 562 | meta_temp_dir = "/tmp/" 563 | keep = false 564 | lowercase = false 565 | words_with_numbers = false 566 | convert_umlauts = false 567 | show_count = false 568 | auth_type = nil 569 | auth_user = nil 570 | auth_pass = nil 571 | 572 | proxy_host = nil 573 | proxy_port = nil 574 | proxy_username = nil 575 | proxy_password = nil 576 | 577 | # headers will be passed in in the format "header: value" 578 | # and there can be multiple 579 | headers = [] 580 | 581 | strip_css = true 582 | strip_js = true 583 | 584 | begin 585 | opts.each do |opt, arg| 586 | case opt 587 | when '--help' 588 | usage 589 | when "--lowercase" 590 | lowercase = true 591 | when "--with-numbers" 592 | words_with_numbers = true 593 | when "--convert-umlauts" 594 | convert_umlauts = true 595 | when "--count" 596 | show_count = true 597 | when "--meta-temp-dir" 598 | if !File.directory?(arg) 599 | puts "\nMeta temp directory is not a directory\n\n" 600 | exit 1 601 | end 602 | 603 | if !File.writable?(arg) 604 | puts "\nThe meta temp directory is not writable\n\n" 605 | exit 1 606 | end 607 | 608 | meta_temp_dir = arg 609 | meta_temp_dir += "/" if meta_temp_dir !~ /.*\/$/ 610 | when "--keep" 611 | keep = true 612 | when "--no-words" 613 | wordlist = false 614 | when "--meta_file" 615 | meta_outfile = arg 616 | when "--meta" 617 | meta = true 618 | when "--groups" 619 | groups = arg.to_i 620 | when "--email_file" 621 | email_outfile = arg 622 | when "--email" 623 | email = true 624 | when '--min_word_length' 625 | min_word_length = arg.to_i 626 | usage if min_word_length < 1 627 | when '--depth' 628 | depth = arg.to_i 629 | usage if depth < 0 630 | when '--offsite' 631 | offsite = true 632 | when '--exclude' 633 | begin 634 | tmp_exclude_array = File.readlines(arg) 635 | rescue => e 636 | puts "\nUnable to open the excude file\n\n" 637 | exit 1 638 | end 639 | # Have to do this to strip the newline characters from the end 640 | # of each element in the array 641 | tmp_exclude_array.each do |line| 642 | exc = line.strip 643 | if exc != "" 644 | exclude_array << line.strip 645 | # puts "Excluding #{ line.strip}" 646 | end 647 | end 648 | when '--allowed' 649 | allowed_pattern = Regexp.new(arg) 650 | when '--ua' 651 | ua = arg 652 | when '--debug' 653 | debug = true 654 | when '--verbose' 655 | verbose = true 656 | when '--write' 657 | outfile = arg 658 | when "--header" 659 | headers << arg 660 | when "--proxy_password" 661 | proxy_password = arg 662 | when "--proxy_username" 663 | proxy_username = arg 664 | when "--proxy_host" 665 | proxy_host = arg 666 | when "--proxy_port" 667 | proxy_port = arg.to_i 668 | when "--auth_pass" 669 | auth_pass = arg 670 | when "--auth_user" 671 | auth_user = arg 672 | when "--auth_type" 673 | if arg =~ /(digest|basic)/i 674 | auth_type = $1.downcase 675 | if auth_type == "digest" 676 | begin 677 | require "net/http/digest_auth" 678 | rescue LoadError => e 679 | # Catch error and provide feedback on installing gem 680 | puts "\nError: To use digest auth you require the net-http-digest_auth gem\n" 681 | puts "\t Use: 'gem install net-http-digest_auth'\n\n" 682 | exit 2 683 | end 684 | end 685 | else 686 | puts "\nInvalid authentication type, please specify either basic or digest\n\n" 687 | exit 1 688 | end 689 | end 690 | end 691 | rescue => e 692 | # puts e 693 | usage 694 | end 695 | 696 | if auth_type && (auth_user.nil? || auth_pass.nil?) 697 | puts "\nIf using basic or digest auth you must provide a username and password\n\n" 698 | exit 1 699 | end 700 | 701 | if auth_type.nil? && (!auth_user.nil? || !auth_pass.nil?) 702 | puts "\nAuthentication details provided but no mention of basic or digest\n\n" 703 | exit 1 704 | end 705 | 706 | if ARGV.length != 1 707 | puts "\nMissing URL argument (try --help)\n\n" 708 | exit 1 709 | end 710 | 711 | url = ARGV.shift 712 | 713 | # Must have protocol 714 | url = "http://#{url}" if url !~ /^http(s)?:\/\// 715 | 716 | # Taking this back out again. Can't remember why it was put in but have found problems 717 | # with it in and none with it out so getting rid of it. 718 | # 719 | # The spider doesn't work properly if there isn't a / on the end 720 | #if url !~ /\/$/ 721 | # url = "#{url}/" 722 | #end 723 | 724 | group_word_hash = {} 725 | word_hash = {} 726 | email_arr = [] 727 | url_stack = Tree.new 728 | url_stack.debug = debug 729 | url_stack.max_depth = depth 730 | usernames = Array.new() 731 | 732 | # Do the checks here so we don't do all the processing then find we can't open the file 733 | if outfile 734 | begin 735 | outfile_file = File.new(outfile, "w") 736 | rescue 737 | puts "\nCouldn't open the output file for writing\n\n" 738 | exit 2 739 | end 740 | else 741 | outfile_file = $stdout 742 | end 743 | 744 | if email_outfile && email 745 | begin 746 | email_outfile_file = File.new(email_outfile, "w") 747 | rescue 748 | puts "\nCouldn't open the email output file for writing\n\n" 749 | exit 2 750 | end 751 | else 752 | email_outfile_file = outfile_file 753 | end 754 | 755 | if meta_outfile && email 756 | begin 757 | meta_outfile_file = File.new(meta_outfile, "w") 758 | rescue 759 | puts "\nCouldn't open the metadata output file for writing\n\n" 760 | exit 2 761 | end 762 | else 763 | meta_outfile_file = outfile_file 764 | end 765 | 766 | catch :ctrl_c do 767 | begin 768 | puts "Starting at #{url}" if verbose 769 | 770 | MySpider.proxy(proxy_host, proxy_port, proxy_username, proxy_password) if proxy_host 771 | MySpider.auth_creds(auth_type, auth_user, auth_pass) if auth_type 772 | MySpider.headers(headers) 773 | MySpider.verbose(verbose) 774 | MySpider.debug(debug) 775 | 776 | MySpider.start_at(url) do |s| 777 | s.headers['User-Agent'] = ua if ua 778 | 779 | s.add_url_check do |a_url| 780 | puts "Checking page #{a_url}" if debug 781 | allow = true 782 | 783 | # Extensions to ignore 784 | if a_url =~ /(\.zip$|\.gz$|\.zip$|\.bz2$|\.png$|\.gif$|\.jpg$|^#)/ 785 | puts "Ignoring internal link or graphic: #{a_url}" if verbose 786 | allow = false 787 | else 788 | if /^mailto:(.*)/i.match(a_url) 789 | if email 790 | email_arr << $1 791 | puts "Found #{$1} on page #{a_url}" if verbose 792 | end 793 | allow = false 794 | else 795 | a_url_parsed = URI.parse(a_url) 796 | if !offsite 797 | url_parsed = URI.parse(url) 798 | puts "Comparing #{a_url} with #{url}" if debug 799 | 800 | # Make sure the host, port and scheme matches (else its offsite) 801 | allow = (a_url_parsed.host == url_parsed.host) && (a_url_parsed.port == url_parsed.port) && (a_url_parsed.scheme == url_parsed.scheme) ? true : false 802 | 803 | puts "Offsite link, not following: #{a_url}" if !allow && verbose 804 | else 805 | puts "Allowing offsite links" if @debug 806 | end 807 | 808 | puts "Found: #{a_url_parsed.path}" if @debug 809 | if exclude_array.include?(a_url_parsed.path) 810 | puts "Excluding path: #{a_url_parsed.path}" if verbose 811 | allow = false 812 | end 813 | 814 | if allowed_pattern && !a_url_parsed.path.match(allowed_pattern) 815 | puts "Excluding path: #{a_url_parsed.path} based on allowed pattern" if verbose 816 | allow = false 817 | end 818 | end 819 | end 820 | allow 821 | end 822 | 823 | # This was :success so only the content from a 200 was processed. 824 | # Updating it to :every so that the content of all pages gets processed 825 | # so you can grab things off 404s or text leaked on redirect and error pages. 826 | 827 | s.on :every do |a_url, resp, prior_url| 828 | if verbose 829 | if prior_url.nil? 830 | puts "Visiting: #{a_url}, got response code #{resp.code}" 831 | else 832 | puts "Visiting: #{a_url} referred from #{prior_url}, got response code #{resp.code}" 833 | end 834 | end 835 | 836 | # May want 0-9 in here as well in the future but for now limit it to a-z so 837 | # you can't sneak any nasty characters in 838 | if /.*\.([a-z]+)(\?.*$|$)/i.match(a_url) 839 | file_extension = $1 840 | else 841 | file_extension = '' 842 | end 843 | 844 | # Don't get words from these file types. Most will have been blocked by the url_check function but 845 | # some are let through, such as .css, so that they can be checked for email addresses 846 | 847 | # This is a bad way to do this but it is either white or black list extensions and 848 | # the list of either is quite long, may as well black list and let extra through 849 | # that can then be weeded out later than stop things that could be useful 850 | 851 | #if file_extension =~ /^((doc|dot|ppt|pot|xls|xlt|pps)[xm]?)|(ppam|xlsb|xlam|pdf|zip|gz|zip|bz2|css|png|gif|jpg|#)$/ 852 | if file_extension =~ /^((doc|dot|ppt|pot|xls|xlt|pps)[xm]?)|(ppam|xlsb|xlam|pdf|zip|gz|zip|bz2|png|gif|jpg|#)$/ 853 | if meta 854 | begin 855 | if keep && file_extension =~ /^((doc|dot|ppt|pot|xls|xlt|pps)[xm]?)|(ppam|xlsb|xlam|pdf|zip|gz|zip|bz2)$/ 856 | if /.*\/(.*)$/.match(a_url) 857 | output_filename = meta_temp_dir + $1 858 | puts "Keeping #{output_filename}" if verbose 859 | else 860 | # Shouldn't ever get here as the regex above should always be able to pull the filename out of the URL, 861 | # ...but just in case 862 | 863 | # Maybe look at doing this to make the temp name 864 | # require "tempfile" 865 | # Dir::Tmpname.make_tmpname "a", "b" 866 | # => "a20150707-8694-hrrxr4-b" 867 | 868 | output_filename = "#{meta_temp_dir}cewl_tmp" 869 | output_filename += ".#{file_extension}" unless file_extension.empty? 870 | end 871 | else 872 | output_filename = "#{meta_temp_dir}cewl_tmp" 873 | output_filename += ".#{file_extension}" unless file_extension.empty? 874 | end 875 | 876 | out = File.new(output_filename, "wb") 877 | out.print(resp.body) 878 | out.close 879 | 880 | meta_data = process_file(output_filename, verbose) 881 | usernames += meta_data if (meta_data != nil) 882 | rescue => e 883 | puts "\nCouldn't open the meta temp file for writing - #{e.inspect}\n\n" 884 | exit 2 885 | end 886 | end 887 | else 888 | html = resp.body.to_s.force_encoding("UTF-8") 889 | # This breaks on this site http://www.spisa.nu/recept/ as the 890 | # replace replaces some of the important characters. Needs a fix 891 | html.encode!('UTF-16', 'UTF-8', :invalid => :replace, :replace => '') 892 | html.encode!('UTF-8', 'UTF-16') 893 | 894 | dom = Nokogiri.HTML(html) 895 | dom.css('script').remove if strip_js 896 | dom.css('style').remove if strip_css 897 | body = dom.to_s 898 | 899 | # Get meta data 900 | if /.*"\/']*/, "") 903 | end 904 | 905 | if /.*"\/']*/, "") 908 | end 909 | 910 | puts body if debug 911 | 912 | # This bit will not normally fire as all JavaScript is stripped out 913 | # by the Nokogiri remove a few lines before this. 914 | # 915 | # The code isn't perfect but will do a rough job of working out 916 | # pages from relative location links 917 | while /(location.href\s*=\s*["']([^"']*)['"];)/i.match(body) 918 | full_match = $1 919 | j_url = $2 920 | 921 | puts "Javascript redirect found #{j_url}" if verbose 922 | 923 | re = Regexp.escape(full_match) 924 | body.gsub!(/#{re}/, "") 925 | 926 | if j_url !~ /https?:\/\//i 927 | parsed = URI.parse(a_url) 928 | protocol = parsed.scheme 929 | host = parsed.host 930 | 931 | domain = "#{protocol}://#{host}" 932 | 933 | j_url = domain + j_url 934 | j_url += $1 if j_url[0] == "/" && parsed.path =~ /(.*)\/.*/ 935 | 936 | puts "Relative URL found, adding domain to make #{j_url}" if verbose 937 | end 938 | 939 | x = {a_url => j_url} 940 | url_stack.push x 941 | end 942 | 943 | # Strip comment tags 944 | body.gsub!(//, "") 946 | 947 | # If you want to add more attribute names to include, just add them to this array 948 | attribute_names = [ 949 | "alt", 950 | "title", 951 | ] 952 | 953 | attribute_text = '' 954 | 955 | attribute_names.each { |attribute_name| 956 | body.gsub!(/#{attribute_name}="([^"]*)"/) { |attr| attribute_text += "#{$1} " } 957 | } 958 | 959 | if verbose and attribute_text 960 | puts "Attribute text found:" 961 | puts attribute_text 962 | puts 963 | end 964 | 965 | body += " #{attribute_text}" 966 | 967 | # Strip html tags 968 | words = body.gsub(/<\/?[^>]*>/, "") 969 | 970 | # Check if this is needed 971 | words.gsub!(/&[a-z]*;/, "") 972 | 973 | begin 974 | #if file_extension !~ /^((doc|dot|ppt|pot|xls|xlt|pps)[xm]?)|(ppam|xlsb|xlam|pdf|zip|gz|zip|bz2|css|png|gif|jpg|#)$/ 975 | begin 976 | if email 977 | # Split the file down based on the email address regexp 978 | #words.gsub!(/\b([A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,4})\b/i) 979 | #p words 980 | 981 | # If you want to pull email addresses from the contents of files found, such as word docs then move 982 | # this block outside the if statement 983 | # I've put it in here as some docs contain email addresses that have nothing to do with the target 984 | # so give false positive type results 985 | words.each_line do |word| 986 | while /\b([A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,4})\b/i.match(word) 987 | puts "Found #{$1} on page #{a_url}" if verbose 988 | email_arr << $1 989 | word = word.gsub(/#{$1}/, "") 990 | end 991 | end 992 | end 993 | rescue => e 994 | puts "\nThere was a problem generating the email list" 995 | puts "Error: #{e.inspect}" 996 | puts e.backtrace 997 | end 998 | 999 | if wordlist 1000 | # Lowercase all parsed words 1001 | if lowercase then 1002 | words.downcase! 1003 | end 1004 | # Remove any symbols 1005 | if words_with_numbers then 1006 | words.gsub!(/[^[[:alnum:]]]/i, " ") 1007 | else 1008 | words.gsub!(/[^[[:alpha:]]]/i, " ") 1009 | end 1010 | 1011 | if convert_umlauts then 1012 | words.gsub!(/[äöüßÄÖÜ]/, "ä" => "ae", "ö" => "oe", "ü" => "ue", "ß" => "ss", "Ä" => "Ae", "Ö" => "Oe", "Ü" => "Ue") 1013 | end 1014 | 1015 | # Add to the array 1016 | group_words = [] 1017 | words.split(" ").each do |word| 1018 | if word.length >= min_word_length 1019 | word_hash[word] = 0 if !word_hash.has_key?(word) 1020 | word_hash[word] += 1 1021 | end 1022 | if (groups > 0) 1023 | group_words.push (word) 1024 | if (group_words.length() > groups) 1025 | group_words.shift() 1026 | end 1027 | if (group_words.length() == groups) 1028 | joined = group_words.join(" ") 1029 | group_word_hash[joined] = 0 if !group_word_hash.has_key?(joined) 1030 | group_word_hash[joined] += 1 1031 | end 1032 | end 1033 | end 1034 | end 1035 | #end 1036 | rescue => e 1037 | puts "\nThere was a problem handling word generation" 1038 | puts "Error: #{e.inspect}" 1039 | puts e.backtrace 1040 | end 1041 | end 1042 | end 1043 | s.store_next_urls_with url_stack 1044 | end 1045 | rescue Errno::ENOENT 1046 | puts "\nInvalid URL specified (#{url})\n\n" 1047 | exit 2 1048 | rescue => e 1049 | puts "\nCouldn't access the site (#{url})\n" 1050 | puts "Error: #{e.inspect}" 1051 | puts "Error: #{e.backtrace}" 1052 | exit 2 1053 | end 1054 | end 1055 | 1056 | puts "End of main loop" if debug 1057 | 1058 | if wordlist 1059 | if verbose 1060 | if outfile.nil? 1061 | puts "Words found\n" 1062 | else 1063 | puts "Writing words to file\n" 1064 | end 1065 | end 1066 | 1067 | sorted_wordlist = word_hash.sort_by do |word, count| 1068 | -count 1069 | end 1070 | 1071 | sorted_wordlist.each do |word, count| 1072 | if show_count 1073 | outfile_file.puts "#{word}, #{count.to_s}" 1074 | else 1075 | outfile_file.puts word 1076 | end 1077 | end 1078 | end 1079 | 1080 | if groups > 0 1081 | if verbose 1082 | if outfile.nil? 1083 | puts "Groups of words found\n" 1084 | else 1085 | puts "Writing groups of words to file\n" 1086 | end 1087 | end 1088 | 1089 | sorted_wordlist = group_word_hash.sort_by do |word, count| 1090 | -count 1091 | end 1092 | 1093 | sorted_wordlist.each do |word, count| 1094 | if show_count 1095 | outfile_file.puts "#{word}, #{count.to_s}" 1096 | else 1097 | outfile_file.puts word 1098 | end 1099 | end 1100 | end 1101 | 1102 | puts "End of wordlist loop" if debug 1103 | 1104 | if email 1105 | if email_arr.length == 0 1106 | puts "No email addresses found" if verbose 1107 | else 1108 | puts "Dumping email addresses to file" if verbose 1109 | 1110 | email_arr.delete_if { |x| x.chomp.empty? } 1111 | email_arr.uniq! 1112 | email_arr.sort! 1113 | 1114 | outfile_file.puts if (wordlist || verbose) && email_outfile.nil? 1115 | 1116 | if email_outfile.nil? 1117 | outfile_file.puts "Email addresses found" 1118 | outfile_file.puts "---------------------" 1119 | outfile_file.puts email_arr.join("\n") 1120 | else 1121 | email_outfile_file.puts email_arr.join("\n") 1122 | end 1123 | end 1124 | end 1125 | 1126 | puts "End of email loop" if debug 1127 | 1128 | if meta 1129 | if usernames.length == 0 1130 | puts "No meta data found" if verbose 1131 | else 1132 | puts "Dumping meta data to file" if verbose 1133 | usernames.delete_if { |x| x.chomp.empty? } 1134 | usernames.uniq! 1135 | usernames.sort! 1136 | 1137 | outfile_file.puts if (email||wordlist) && meta_outfile.nil? 1138 | if meta_outfile.nil? 1139 | outfile_file.puts "Meta data found" 1140 | outfile_file.puts "---------------" 1141 | outfile_file.puts usernames.join("\n") 1142 | else 1143 | meta_outfile_file.puts usernames.join("\n") 1144 | end 1145 | end 1146 | end 1147 | 1148 | puts "End of meta loop" if debug 1149 | 1150 | meta_outfile_file.close if meta_outfile 1151 | email_outfile_file.close if email_outfile 1152 | outfile_file.close if outfile 1153 | -------------------------------------------------------------------------------- /tools/cewl_lib.rb: -------------------------------------------------------------------------------- 1 | # == CeWL Library: Library to outsource reusable features 2 | # 3 | # Author:: Robin Wood (robin@digi.ninja) 4 | # Copyright:: Copyright (c) Robin Wood 2016 5 | # Licence:: GPL 6 | # 7 | 8 | begin 9 | require 'mini_exiftool' 10 | require "zip" 11 | require "rexml/document" 12 | require 'mime' 13 | require 'mime-types' 14 | include REXML 15 | rescue LoadError => e 16 | # catch error and prodive feedback on installing gem 17 | if e.to_s =~ /cannot load such file -- (.*)/ 18 | missing_gem = $1 19 | puts "\nError: #{missing_gem} gem not installed\n" 20 | puts "\t use: \"gem install #{missing_gem}\" to install the required gem\n\n" 21 | exit 22 | else 23 | puts "There was an error loading the gems:" 24 | puts 25 | puts e.to_s 26 | exit 27 | end 28 | end 29 | 30 | # Override the MiniExiftool class so that I can modify the parse_line 31 | # method and force all encoding to ISO-8859-1. Without this the app bombs 32 | # on some machines as it is unable to parse UTF-8 33 | class MyMiniExiftool(.*)<\/xap:creator>/i.match(line) 83 | if verbose 84 | puts "Found pdf:creator: "+$1 85 | end 86 | meta_data<<$1.to_s.chomp unless $1.to_s=="" 87 | end 88 | if /(.*)<\/xap:Author>/i.match(line) 89 | if verbose 90 | puts "Found xap:Author: "+$1 91 | end 92 | meta_data<<$1.to_s.chomp unless $1.to_s=="" 93 | end 94 | if /(.*)<\/pdf:Author>/i.match(line) 95 | if verbose 96 | puts "Found pdf:Author: "+$1 97 | end 98 | meta_data<<$1.to_s.chomp unless $1.to_s=="" 99 | end 100 | if /(.*)<\/dc:creator>/i.match(line) 101 | if verbose 102 | puts "Found dc:creator: "+$1 103 | end 104 | meta_data<<$1.to_s.chomp unless $1.to_s=="" 105 | end 106 | 107 | } 108 | return meta_data 109 | rescue => e 110 | if verbose 111 | puts "There was an error processing the document - " + e.message 112 | end 113 | end 114 | return meta_data 115 | end 116 | 117 | # Get data from files using exiftool 118 | def get_doc_data(doc_file, verbose) 119 | data=[] 120 | begin 121 | interesting_fields=Array.[]("Author","LastSavedBy","Creator") 122 | file = MyMiniExiftool.new(doc_file) 123 | 124 | interesting_fields.each{ |field_name| 125 | if file.tags.include?(field_name) 126 | data< e 130 | if verbose 131 | puts "There was an error processing the document - " + e.message 132 | end 133 | end 134 | return data 135 | end 136 | 137 | # Get data from Office 2007 documents by unziping relivant XML files then 138 | # checking for known fields 139 | def get_docx_data(docx_file, verbose) 140 | meta_data=[] 141 | 142 | interesting_fields=Array.[]("cp:coreProperties/dc:creator","cp:coreProperties/cp:lastModifiedBy") 143 | interesting_files=Array.[]("docProps/core.xml") 144 | 145 | begin 146 | Zip::ZipFile.open(docx_file) { |zipfile| 147 | interesting_files.each { |file| 148 | if zipfile.find_entry(file) 149 | xml=zipfile.read(file) 150 | 151 | doc=Document.new(xml) 152 | interesting_fields.each { |field| 153 | element=doc.elements[field] 154 | #puts element.get_text unless element==nil||element.get_text==nil 155 | meta_data< e 161 | if verbose 162 | # not a zip file 163 | puts "File probably not a zip file - " + e.message 164 | end 165 | end 166 | return meta_data 167 | end 168 | 169 | # Take the file given, try to work out what type of file it is then pass it 170 | # to the relivant function to try to grab meta data 171 | def process_file(filename, verbose=false) 172 | meta_data=nil 173 | 174 | begin 175 | puts "processing file: " + filename 176 | 177 | if File.file?(filename) && File.exist?(filename) 178 | mime_types=MIME::Types.type_for(filename) 179 | if(mime_types.size==0) 180 | if(verbose) 181 | puts "Empty mime type" 182 | end 183 | return meta_data 184 | end 185 | if verbose 186 | puts "Checking "+filename 187 | puts " Mime type="+mime_types.join(", ") 188 | puts 189 | end 190 | if mime_types.include?("application/word") || mime_types.include?("application/excel") || mime_types.include?("application/powerpoint") 191 | if verbose 192 | puts " Mime type says original office document" 193 | end 194 | meta_data=get_doc_data(filename, verbose) 195 | else 196 | if mime_types.include?("application/pdf") 197 | if verbose 198 | puts " Mime type says PDF" 199 | end 200 | # Running both my own regexp and exiftool on pdfs as I've found exif misses some data 201 | meta_data=get_doc_data(filename, verbose) 202 | meta_data+=get_pdf_data(filename, verbose) 203 | else 204 | # list taken from http://en.wikipedia.org/wiki/Microsoft_Office_2007_file_extensions 205 | if filename =~ /(.(doc|dot|ppt|pot|xls|xlt|pps)[xm]$)|(.ppam$)|(.xlsb$)|(.xlam$)/ 206 | if verbose 207 | puts " File extension says 2007 style office document" 208 | end 209 | meta_data=get_docx_data(filename, verbose) 210 | elsif filename =~ /.php$|.aspx$|.cfm$|.asp$|.html$|.htm$/ 211 | if verbose 212 | puts " Language file, can ignore" 213 | end 214 | else 215 | if verbose 216 | puts " Unknown file type" 217 | end 218 | end 219 | end 220 | end 221 | if meta_data!=nil 222 | if verbose 223 | if meta_data.length > 0 224 | puts " Found "+meta_data.join(", ")+"\n" 225 | end 226 | end 227 | end 228 | end 229 | rescue => e 230 | puts "Problem in process_file function" 231 | puts "Error: " + e.message 232 | puts e.backtrace 233 | end 234 | 235 | return meta_data 236 | end 237 | -------------------------------------------------------------------------------- /tools/fab.rb: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env ruby 2 | 3 | # == FAB: Files Already Bagged 4 | # 5 | # This script can be ran against files already 6 | # downloaded from a target site to generate a list 7 | # of usernames and email addresses based on meta 8 | # data contained within them. 9 | # 10 | # To see a list of file types which can be processed 11 | # see cewl_lib.rb 12 | # 13 | # == Usage 14 | # 15 | # fab [OPTION] ... filename/list 16 | # 17 | # -h, --help: 18 | # show help 19 | # 20 | # -v 21 | # verbose 22 | # 23 | # filename/list: the file or list of files to check 24 | # 25 | # Author:: Robin Wood (robin@digininja.org) 26 | # Copyright:: Copyright (c) Robin Wood 2016 27 | # Licence:: GPL 28 | # 29 | 30 | require "rubygems" 31 | require 'getoptlong' 32 | require_relative "./cewl_lib.rb" 33 | 34 | opts = GetoptLong.new( 35 | [ '--help', '-h', GetoptLong::NO_ARGUMENT ], 36 | [ "-v" , GetoptLong::NO_ARGUMENT ] 37 | ) 38 | 39 | def usage 40 | puts"xx 41 | 42 | Usage: xx [OPTION] ... filename/list 43 | -h, --help: show help 44 | -v: verbose 45 | 46 | filename/list: the file or list of files to check 47 | 48 | " 49 | exit 50 | end 51 | 52 | verbose=false 53 | 54 | begin 55 | opts.each do |opt, arg| 56 | case opt 57 | when '--help' 58 | usage 59 | when '-v' 60 | verbose=true 61 | end 62 | end 63 | rescue 64 | usage 65 | end 66 | 67 | if ARGV.length < 1 68 | puts "Missing filename/list (try --help)" 69 | exit 0 70 | end 71 | 72 | meta_data=[] 73 | 74 | ARGV.each { |param| 75 | data=process_file(param, verbose) 76 | if(data!=nil) 77 | meta_data+=data 78 | end 79 | } 80 | 81 | meta_data.delete_if { |x| x.chomp==""} 82 | meta_data.uniq! 83 | meta_data.sort! 84 | if meta_data.length==0 85 | puts "No data found\n" 86 | else 87 | puts meta_data.join("\n") 88 | end 89 | -------------------------------------------------------------------------------- /tools/hcxdumptool: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sp00ks-git/hat/718d7c4a0ae0197843d5ef52bb0bfdd79c11cd39/tools/hcxdumptool -------------------------------------------------------------------------------- /tools/pp.save: -------------------------------------------------------------------------------- 1 | 0 2 | -------------------------------------------------------------------------------- /tools/pp64.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sp00ks-git/hat/718d7c4a0ae0197843d5ef52bb0bfdd79c11cd39/tools/pp64.bin -------------------------------------------------------------------------------- /tools/rsmangler.rb: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env ruby 2 | #encoding: UTF-8 3 | 4 | # == RSMangler: Take a wordlist and mangle it 5 | # 6 | # RSMangler will take a wordlist and perform various manipulations on it similar to 7 | # those done by John the Ripper with a few extras, the main one being permutations mode 8 | # which takes each word in the list and combines it with the others to produce all 9 | # possible permutations (not combinations, order matters). 10 | # 11 | # See the README for full information 12 | # 13 | # Original Author:: Robin Wood (robin@digi.ninja) 14 | # Version:: 1.5 alpha 15 | # Copyright:: Copyright(c) 2017 Robin Wood - https://digi.ninja 16 | # Licence:: Creative Commons Attribution-Share Alike 2.0 17 | # 18 | # Changes: 19 | # 1.5 alpha - Working on writing straight to disk rather than to STDOUT 20 | # 1.4 - Added full leetspeak option, thanks Felipe Molina (@felmoltor) 21 | # 22 | 23 | require 'date' 24 | require 'getoptlong' 25 | require 'zlib' 26 | 27 | # The left hand character is what you are looking for 28 | # and the right hand array is the one you are replacing it 29 | # with 30 | 31 | leet_swap = { 32 | 's' => ['$', 'z'], 33 | 'e' => ['3'], 34 | 'a' => ['4', '@'], 35 | 'o' => ['0'], 36 | 'i' => ['1', '!'], 37 | 'l' => ['1', '!'], 38 | 't' => ['7'], 39 | 'b' => ['8'], 40 | 'z' => ['2'], 41 | } 42 | 43 | # Common words to append and prepend if --common is allowed 44 | 45 | common_words = [ 46 | 'pw', 47 | 'pwd', 48 | 'admin', 49 | 'sys' 50 | ] 51 | 52 | opts = GetoptLong.new( 53 | ['--help', '-h', GetoptLong::NO_ARGUMENT], 54 | ['--file', '-f', GetoptLong::REQUIRED_ARGUMENT], 55 | ['--output', '-o', GetoptLong::REQUIRED_ARGUMENT], 56 | ['--min', '-m', GetoptLong::REQUIRED_ARGUMENT], 57 | ['--max', '-x', GetoptLong::REQUIRED_ARGUMENT], 58 | ['--perms', '-p', GetoptLong::NO_ARGUMENT], 59 | ['--double', '-d', GetoptLong::NO_ARGUMENT], 60 | ['--reverse', '-r', GetoptLong::NO_ARGUMENT], 61 | ['--leet', '-t', GetoptLong::NO_ARGUMENT], 62 | ['--full-leet', '-T', GetoptLong::NO_ARGUMENT], 63 | ['--capital', '-c', GetoptLong::NO_ARGUMENT], 64 | ['--upper', '-u', GetoptLong::NO_ARGUMENT], 65 | ['--lower', '-l', GetoptLong::NO_ARGUMENT], 66 | ['--swap', '-s', GetoptLong::NO_ARGUMENT], 67 | ['--ed', '-e', GetoptLong::NO_ARGUMENT], 68 | ['--ing', '-i', GetoptLong::NO_ARGUMENT], 69 | ['--punctuation', GetoptLong::NO_ARGUMENT], 70 | ['--years', '-y', GetoptLong::NO_ARGUMENT], 71 | ['--acronym', '-a', GetoptLong::NO_ARGUMENT], 72 | ['--common', '-C', GetoptLong::NO_ARGUMENT], 73 | ['--pnb', GetoptLong::NO_ARGUMENT], 74 | ['--pna', GetoptLong::NO_ARGUMENT], 75 | ['--nb', GetoptLong::NO_ARGUMENT], 76 | ['--na', GetoptLong::NO_ARGUMENT], 77 | ['--force', GetoptLong::NO_ARGUMENT], 78 | ['--space', GetoptLong::NO_ARGUMENT], 79 | ['--allow-duplicates', GetoptLong::NO_ARGUMENT], 80 | ['-v', GetoptLong::NO_ARGUMENT] 81 | ) 82 | 83 | def good_call 84 | puts 85 | puts 'Good call, either reduce the size of your word list or use the --perms option to disable permutations' 86 | puts 87 | exit 88 | end 89 | 90 | def leet_variations (str, swap) 91 | swap_all = Hash.new { |_,k| [k] }.merge(swap) 92 | arr = swap_all.values_at(*str.chars) 93 | arr.shift.product(*arr).map(&:join) 94 | end 95 | 96 | # Display the usage 97 | def usage 98 | puts 'rsmangler v 1.5 Robin Wood (robin@digi.ninja) 99 | 100 | Basic usage: 101 | 102 | ./rsmangler.rb --file wordlist.txt 103 | 104 | To pass the initial words in on standard in do: 105 | 106 | cat wordlist.txt | ./rsmangler.rb 107 | 108 | To send the output to a file: 109 | 110 | ./rsmangler.rb --file wordlist.txt --output mangled.txt 111 | 112 | All options are ON by default, these parameters turn them OFF 113 | 114 | Usage: rsmangler.rb [OPTION] 115 | --help, -h: show help 116 | --file, -f: the input file, use - for STDIN 117 | --output, -o: the output file, use - for STDOUT 118 | --max, -x: maximum word length 119 | --min, -m: minimum word length 120 | --perms, -p: permutate all the words 121 | --double, -d: double each word 122 | --reverse, -r: reverser the word 123 | --leet, -t: l33t speak the word 124 | --full-leet, -T: all posibilities l33t 125 | --capital, -c: capitalise the word 126 | --upper, -u: uppercase the word 127 | --lower, -l: lowercase the word 128 | --swap, -s: swap the case of the word 129 | --ed, -e: add ed to the end of the word 130 | --ing, -i: add ing to the end of the word 131 | --punctuation: add common punctuation to the end of the word 132 | --years, -y: add all years from 1990 to current year to start and end 133 | --acronym, -a: create an acronym based on all the words entered in order and add to word list 134 | --common, -C: add the following words to start and end: admin, sys, pw, pwd 135 | --pna: add 01 - 09 to the end of the word 136 | --pnb: add 01 - 09 to the beginning of the word 137 | --na: add 1 - 123 to the end of the word 138 | --nb: add 1 - 123 to the beginning of the word 139 | --force: don\'t check output size 140 | --space: add spaces between words 141 | --allow-duplicates: allow duplicates in the output list 142 | 143 | ' 144 | 145 | exit 146 | end 147 | 148 | # The uniq_crcs array contains a crc of all words previously written, 149 | # this should prevent duplicates being written out to the file 150 | def puts_if_allowed(word) 151 | 152 | if not @max_length.nil? or not @min_length.nil? 153 | if not @min_length.nil? 154 | if word.length < @min_length 155 | return 156 | end 157 | end 158 | if not @max_length.nil? 159 | if word.length > @max_length 160 | return 161 | end 162 | end 163 | end 164 | 165 | if @deduplicate 166 | crc = Zlib::crc32(word) 167 | if not @uniq_crcs.include?(crc) 168 | @uniq_crcs << crc 169 | @output_handle.puts(word) 170 | end 171 | else 172 | @output_handle.puts(word) 173 | end 174 | @output_handle.flush 175 | end 176 | 177 | verbose = false 178 | leet = true 179 | full_leet = true 180 | perms = true 181 | double = true 182 | reverse = true 183 | capital = true 184 | upper = true 185 | lower = true 186 | swap = true 187 | ed = true 188 | ing = true 189 | punctuation = true 190 | years = true 191 | acronym = true 192 | common = true 193 | pna = true 194 | pnb = true 195 | na = true 196 | nb = true 197 | force = false 198 | space = false 199 | input_file_handle = nil 200 | @min_length = nil 201 | @max_length = nil 202 | @deduplicate = true 203 | @output_handle = STDOUT 204 | @uniq_crcs = [] 205 | @debug = false 206 | 207 | begin 208 | opts.each do |opt, arg| 209 | case opt 210 | when '--help' 211 | usage 212 | when '--output' 213 | if arg == '-' 214 | @output_handle = STDOUT 215 | else 216 | begin 217 | @output_handle = File.new(arg, 'w') 218 | rescue Errno::EACCES 219 | puts "Could not create the output file" 220 | exit 221 | end 222 | end 223 | when '--file' 224 | if arg == '-' 225 | input_file_handle = STDIN 226 | else 227 | if File.exist? arg 228 | input_file_handle = File.new(arg, 'r') 229 | else 230 | puts 'The specified file does not exist' 231 | exit 232 | end 233 | end 234 | when '--allow-duplicates' 235 | @deduplicate = false 236 | when '--max' 237 | @max_length = arg.to_i 238 | when '--min' 239 | @min_length = arg.to_i 240 | when '--leet' 241 | leet = false 242 | when '--full-leet' 243 | full_leet = false 244 | when '--perms' 245 | perms = false 246 | when '--double' 247 | double = false 248 | when '--reverse' 249 | reverse = false 250 | when '--capital' 251 | capital = false 252 | when '--upper' 253 | upper = false 254 | when '--lower' 255 | lower = false 256 | when '--swap' 257 | swap = false 258 | when '--ed' 259 | ed = false 260 | when '--ing' 261 | ing = false 262 | when '--common' 263 | common = false 264 | when '--acronym' 265 | acronym = false 266 | when '--years' 267 | years = false 268 | when '--punctuation' 269 | punctuation = false 270 | when '--pna' 271 | pna = false 272 | when '--pnb' 273 | pnb = false 274 | when '--na' 275 | na = false 276 | when '--nb' 277 | nb = false 278 | when '--space' 279 | space = true 280 | when '--force' 281 | force = true 282 | when '-v' 283 | verbose = true 284 | end 285 | end 286 | rescue => e 287 | puts e 288 | usage 289 | exit 290 | end 291 | 292 | if input_file_handle.nil? 293 | puts 'No input file specified' 294 | puts 295 | usage 296 | exit 297 | end 298 | 299 | file_words = [] 300 | 301 | puts "Loading in the list" if @debug 302 | 303 | while (word = input_file_handle.gets) 304 | file_words << word.chomp! 305 | end 306 | 307 | input_file_handle.close 308 | 309 | if !force and perms and file_words.length > 5 310 | puts '5 words in a start list creates a dictionary of nearly 100,000 words.' 311 | puts 'You have ' + file_words.length.to_s + ' words in your list, are you sure you wish to continue?' 312 | puts 'Hit ctrl-c to abort' 313 | puts 314 | 315 | interrupted = false 316 | trap('INT') { interrupted = true } 317 | 318 | 5.downto(1) do |i| 319 | print i.to_s + ' ' 320 | STDOUT.flush 321 | sleep 1 322 | 323 | good_call if interrupted 324 | end 325 | 326 | good_call if interrupted 327 | end 328 | 329 | wordlist = [] 330 | 331 | if perms 332 | puts "Generating the permutations" if @debug 333 | for i in (1..file_words.length) 334 | file_words.permutation(i) do |c| 335 | perm = c.join 336 | wordlist << perm 337 | puts_if_allowed(perm) 338 | end 339 | end 340 | else 341 | wordlist = file_words 342 | end 343 | 344 | puts "Permutations generated" if @debug 345 | 346 | acro = nil 347 | 348 | if acronym 349 | puts "Generating the acronyms" if @debug 350 | 351 | acro = '' 352 | file_words.each do |c| 353 | acro += c[0, 1] 354 | end 355 | puts_if_allowed(acro) 356 | wordlist << acro 357 | end 358 | 359 | puts "Doing the mangling" if @debug 360 | wordlist.each do |x| 361 | results = [] 362 | 363 | results << x + x if double 364 | results << x.reverse if reverse 365 | results << x.capitalize if capital 366 | results << x.downcase if lower 367 | results << x.upcase if upper 368 | results << x.swapcase if swap 369 | results << x + 'ed' if ed 370 | results << x + 'ing' if ing 371 | 372 | if common 373 | common_words.each do |word| 374 | results << word + x 375 | results << x + word 376 | end 377 | end 378 | 379 | if full_leet 380 | leetarr = leet_variations(x, leet_swap) 381 | leetarr.each do |leetvar| 382 | results << leetvar 383 | end 384 | else 385 | # Only look at doing this if full leet is not enabled 386 | 387 | # Have to clone it otherwise the assignment is done 388 | # by reference and the gsub! updates both x and all_swapped 389 | all_swapped = x.clone 390 | if leet 391 | leet_swap.each_pair do |find, rep| 392 | all_swapped.gsub!(/#{find}/, rep) 393 | results << x.gsub(/#{find}/, rep) 394 | end 395 | results << all_swapped 396 | end 397 | end 398 | 399 | if punctuation 400 | for i in ('!@$%^&*()'.scan(/./)) 401 | results << x + i.to_s 402 | end 403 | end 404 | 405 | if years 406 | for i in (1990..2020) 407 | results << i.to_s + x 408 | results << x + i.to_s 409 | end 410 | end 411 | 412 | if pna || pnb 413 | for i in (1..9) 414 | results << '0' + i.to_s + x if pnb 415 | results << x + '0' + i.to_s if pna 416 | end 417 | end 418 | 419 | if na || nb 420 | for i in (1..123) 421 | results << i.to_s + x if nb 422 | results << x + i.to_s if na 423 | end 424 | end 425 | 426 | results.uniq! 427 | 428 | results.each do |res| 429 | puts_if_allowed(res) 430 | end 431 | end 432 | -------------------------------------------------------------------------------- /tools/statsgen: -------------------------------------------------------------------------------- 1 | #! /usr/bin/python3 2 | # StatsGen - Password Statistical Analysis tool 3 | # 4 | # This tool is part of PACK (Password Analysis and Cracking Kit) 5 | # 6 | # VERSION 0.0.3 7 | # 8 | # Copyright (C) 2013 Peter Kacherginsky 9 | # All rights reserved. 10 | # 11 | # Please see the attached LICENSE file for additional licensing information. 12 | 13 | import operator 14 | import string 15 | from optparse import OptionParser, OptionGroup 16 | 17 | VERSION = "0.0.3" 18 | 19 | 20 | class StatsGen: 21 | def __init__(self): 22 | self.output_file = None 23 | 24 | # Filters 25 | self.minlength = None 26 | self.maxlength = None 27 | self.simplemasks = None 28 | self.charsets = None 29 | self.quiet = False 30 | self.debug = True 31 | 32 | # Stats dictionaries 33 | self.stats_length = dict() 34 | self.stats_simplemasks = dict() 35 | self.stats_advancedmasks = dict() 36 | self.stats_charactersets = dict() 37 | 38 | # Ignore stats with less than 1% coverage 39 | self.hiderare = False 40 | 41 | self.filter_counter = 0 42 | self.total_counter = 0 43 | 44 | # Minimum password complexity counters 45 | self.mindigit = None 46 | self.minupper = None 47 | self.minlower = None 48 | self.minspecial = None 49 | 50 | self.maxdigit = None 51 | self.maxupper = None 52 | self.maxlower = None 53 | self.maxspecial = None 54 | 55 | @staticmethod 56 | def analyze_password(password): 57 | 58 | # Password length 59 | pass_length = len(password) 60 | 61 | # Character-set and policy counters 62 | digit = 0 63 | lower = 0 64 | upper = 0 65 | special = 0 66 | 67 | simplemask = list() 68 | advancedmask_string = "" 69 | 70 | # Detect simple and advanced masks 71 | for letter in password: 72 | 73 | if letter in string.digits: 74 | digit += 1 75 | advancedmask_string += "?d" 76 | if not simplemask or not simplemask[-1] == 'digit': 77 | simplemask.append('digit') 78 | 79 | elif letter in string.ascii_lowercase: 80 | lower += 1 81 | advancedmask_string += "?l" 82 | if not simplemask or not simplemask[-1] == 'string': 83 | simplemask.append('string') 84 | 85 | elif letter in string.ascii_uppercase: 86 | upper += 1 87 | advancedmask_string += "?u" 88 | if not simplemask or not simplemask[-1] == 'string': 89 | simplemask.append('string') 90 | 91 | else: 92 | special += 1 93 | advancedmask_string += "?s" 94 | if not simplemask or not simplemask[-1] == 'special': 95 | simplemask.append('special') 96 | 97 | # String representation of masks 98 | simplemask_string = ''.join(simplemask) if len(simplemask) <= 3 else 'othermask' 99 | 100 | # Policy 101 | policy = (digit, lower, upper, special) 102 | 103 | # Determine character-set 104 | if digit and not lower and not upper and not special: 105 | charset = 'numeric' 106 | elif not digit and lower and not upper and not special: 107 | charset = 'loweralpha' 108 | elif not digit and not lower and upper and not special: 109 | charset = 'upperalpha' 110 | elif not digit and not lower and not upper and special: 111 | charset = 'special' 112 | elif not digit and lower and upper and not special: 113 | charset = 'mixedalpha' 114 | elif digit and lower and not upper and not special: 115 | charset = 'loweralphanum' 116 | elif digit and not lower and upper and not special: 117 | charset = 'upperalphanum' 118 | elif not digit and lower and not upper and special: 119 | charset = 'loweralphaspecial' 120 | elif not digit and not lower and upper and special: 121 | charset = 'upperalphaspecial' 122 | elif digit and not lower and not upper and special: 123 | charset = 'specialnum' 124 | elif not digit and lower and upper and special: 125 | charset = 'mixedalphaspecial' 126 | elif digit and not lower and upper and special: 127 | charset = 'upperalphaspecialnum' 128 | elif digit and lower and not upper and special: 129 | charset = 'loweralphaspecialnum' 130 | elif digit and lower and upper and not special: 131 | charset = 'mixedalphanum' 132 | else: 133 | charset = 'all' 134 | 135 | return pass_length, charset, simplemask_string, advancedmask_string, policy 136 | 137 | def generate_stats(self, filename): 138 | """ Generate password statistics. """ 139 | 140 | f = open(filename, 'r', encoding="latin-1", errors='ignore') 141 | for password in f: 142 | password = password.rstrip('\r\n') 143 | 144 | # if the password is empty, continue 145 | if not password: 146 | continue 147 | 148 | self.total_counter += 1 149 | 150 | (pass_length, characterset, simplemask, advancedmask, policy) = self.analyze_password(password) 151 | (digit, lower, upper, special) = policy 152 | 153 | if (self.charsets is None or characterset in self.charsets) and \ 154 | (self.simplemasks is None or simplemask in self.simplemasks) and \ 155 | (self.maxlength is None or pass_length <= self.maxlength) and \ 156 | (self.minlength is None or pass_length >= self.minlength): 157 | 158 | self.filter_counter += 1 159 | 160 | if self.mindigit is None or digit < self.mindigit: 161 | self.mindigit = digit 162 | if self.maxdigit is None or digit > self.maxdigit: 163 | self.maxdigit = digit 164 | 165 | if self.minupper is None or upper < self.minupper: 166 | self.minupper = upper 167 | if self.maxupper is None or upper > self.maxupper: 168 | self.maxupper = upper 169 | 170 | if self.minlower is None or lower < self.minlower: 171 | self.minlower = lower 172 | if self.maxlower is None or lower > self.maxlower: 173 | self.maxlower = lower 174 | 175 | if self.minspecial is None or special < self.minspecial: 176 | self.minspecial = special 177 | if self.maxspecial is None or special > self.maxspecial: 178 | self.maxspecial = special 179 | 180 | if pass_length in self.stats_length: 181 | self.stats_length[pass_length] += 1 182 | else: 183 | self.stats_length[pass_length] = 1 184 | 185 | if characterset in self.stats_charactersets: 186 | self.stats_charactersets[characterset] += 1 187 | else: 188 | self.stats_charactersets[characterset] = 1 189 | 190 | if simplemask in self.stats_simplemasks: 191 | self.stats_simplemasks[simplemask] += 1 192 | else: 193 | self.stats_simplemasks[simplemask] = 1 194 | 195 | if advancedmask in self.stats_advancedmasks: 196 | self.stats_advancedmasks[advancedmask] += 1 197 | else: 198 | self.stats_advancedmasks[advancedmask] = 1 199 | 200 | f.close() 201 | 202 | def print_stats(self): 203 | """ Print password statistics. """ 204 | 205 | print("[+] Analyzing %d%% (%d/%d) of passwords" % (self.filter_counter*100//self.total_counter, 206 | self.filter_counter, self.total_counter)) 207 | print("[*] Statistics below is relative to the number of analyzed passwords, not total number of passwords") 208 | print("\n[*] Length:") 209 | for (length, count) in sorted(iter(self.stats_length.items()), key=operator.itemgetter(1), reverse=True): 210 | if self.hiderare and not count*100//self.filter_counter > 0: 211 | continue 212 | print("[+] %25d: %02d%% (%d)" % (length, count*100/self.filter_counter, count)) 213 | 214 | print("\n[*] Character-set:") 215 | for (char, count) in sorted(iter(self.stats_charactersets.items()), key=operator.itemgetter(1), reverse=True): 216 | if self.hiderare and not count*100//self.filter_counter > 0: 217 | continue 218 | print("[+] %25s: %02d%% (%d)" % (char, count*100/self.filter_counter, count)) 219 | 220 | print("\n[*] Password complexity:") 221 | print("[+] digit: min(%s) max(%s)" % (self.mindigit, self.maxdigit)) 222 | print("[+] lower: min(%s) max(%s)" % (self.minlower, self.maxlower)) 223 | print("[+] upper: min(%s) max(%s)" % (self.minupper, self.maxupper)) 224 | print("[+] special: min(%s) max(%s)" % (self.minspecial, self.maxspecial)) 225 | 226 | print("\n[*] Simple Masks:") 227 | for (simplemask, count) in sorted(iter(self.stats_simplemasks.items()), key=operator.itemgetter(1), 228 | reverse=True): 229 | if self.hiderare and not count*100//self.filter_counter > 0: 230 | continue 231 | print("[+] %25s: %02d%% (%d)" % (simplemask, count*100//self.filter_counter, count)) 232 | 233 | print("\n[*] Advanced Masks:") 234 | for (advancedmask, count) in sorted(iter(self.stats_advancedmasks.items()), key=operator.itemgetter(1), 235 | reverse=True): 236 | if count*100//self.filter_counter > 0: 237 | print("[+] %25s: %02d%% (%d)" % (advancedmask, count*100//self.filter_counter, count)) 238 | 239 | if self.output_file: 240 | self.output_file.write("%s,%d\n" % (advancedmask, count)) 241 | 242 | if __name__ == "__main__": 243 | 244 | header = " _ \n" 245 | header += " StatsGen %s | |\n" % VERSION 246 | header += " _ __ __ _ ___| | _\n" 247 | header += " | '_ \ / _` |/ __| |/ /\n" 248 | header += " | |_) | (_| | (__| < \n" 249 | header += " | .__/ \__,_|\___|_|\_\\\n" 250 | header += " | | \n" 251 | header += " |_| iphelix@thesprawl.org\n" 252 | header += "\n" 253 | 254 | parser = OptionParser("%prog [options] passwords.txt\n\nType --help for more options", version="%prog "+VERSION) 255 | 256 | filters = OptionGroup(parser, "Password Filters") 257 | filters.add_option("--minlength", dest="minlength", type="int", metavar="8", help="Minimum password length") 258 | filters.add_option("--maxlength", dest="maxlength", type="int", metavar="8", help="Maximum password length") 259 | filters.add_option("--charset", dest="charsets", help="Password charset filter (comma separated)", 260 | metavar="loweralpha,numeric") 261 | filters.add_option("--simplemask", dest="simplemasks", help="Password mask filter (comma separated)", 262 | metavar="stringdigit,allspecial") 263 | parser.add_option_group(filters) 264 | 265 | parser.add_option("-o", "--output", dest="output_file", help="Save masks and stats to a file", 266 | metavar="password.masks") 267 | parser.add_option("--hiderare", action="store_true", dest="hiderare", default=False, 268 | help="Hide statistics covering less than 1% of the sample") 269 | 270 | parser.add_option("-q", "--quiet", action="store_true", dest="quiet", default=False, help="Don't show headers.") 271 | (options, args) = parser.parse_args() 272 | 273 | # Print program header 274 | if not options.quiet: 275 | print(header) 276 | 277 | if len(args) != 1: 278 | parser.error("no passwords file specified") 279 | exit(1) 280 | 281 | print("[*] Analyzing passwords in [%s]" % args[0]) 282 | 283 | statsgen = StatsGen() 284 | 285 | if options.minlength is not None: 286 | statsgen.minlength = options.minlength 287 | if options.maxlength is not None: 288 | statsgen.maxlength = options.maxlength 289 | if options.charsets is not None: 290 | statsgen.charsets = [x.strip() for x in options.charsets.split(',')] 291 | if options.simplemasks is not None: 292 | statsgen.simplemasks = [x.strip() for x in options.simplemasks.split(',')] 293 | 294 | if options.hiderare: 295 | statsgen.hiderare = options.hiderare 296 | 297 | if options.output_file: 298 | print("[*] Saving advanced masks and occurrences to [%s]" % options.output_file) 299 | statsgen.output_file = open(options.output_file, 'w') 300 | 301 | statsgen.generate_stats(args[0]) 302 | statsgen.print_stats() 303 | -------------------------------------------------------------------------------- /wireless_upload/capula-guest-1-02.cap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sp00ks-git/hat/718d7c4a0ae0197843d5ef52bb0bfdd79c11cd39/wireless_upload/capula-guest-1-02.cap -------------------------------------------------------------------------------- /wireless_upload/capula-guest-1-02.hccapx: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sp00ks-git/hat/718d7c4a0ae0197843d5ef52bb0bfdd79c11cd39/wireless_upload/capula-guest-1-02.hccapx -------------------------------------------------------------------------------- /wireless_upload/test.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sp00ks-git/hat/718d7c4a0ae0197843d5ef52bb0bfdd79c11cd39/wireless_upload/test.txt --------------------------------------------------------------------------------