LinuxCommandLibrary

cewl

TLDR

Create a wordlist from URL with 2 links depth

$ cewl -d 2 -w [path/to/wordlist.txt] [url]
copy
Output alphanumeric wordlist with minimum 5 characters
$ cewl --with-numbers -m 5 [url]
copy
Output wordlist with debug and email addresses
$ cewl --debug -e [url]
copy
Use HTTP authentication
$ cewl --auth_type [basic|digest] --auth_user [username] --auth_pass [password] [url]
copy
Use a proxy
$ cewl --proxy_host [host] --proxy_port [port] [url]
copy

SYNOPSIS

cewl [options] url

DESCRIPTION

cewl (Custom Word List generator) spiders a website and creates a wordlist from the content found. This wordlist can be used for password cracking, especially when targeting organizations where passwords may be based on company-specific terms.
The tool follows links to a configurable depth and extracts unique words meeting length requirements.

PARAMETERS

-d, --depth n

Spider to link depth n (default: 2)
-w, --write file
Write wordlist to file
-m, --min_word_length n
Minimum word length
--with-numbers
Include words with numbers
-e, --email
Include email addresses
--debug
Enable debug output
--auth_type type
Authentication type: basic or digest
--auth_user user
Authentication username
--auth_pass pass
Authentication password
--proxy_host host
Proxy host
--proxy_port port
Proxy port

CAVEATS

Only use on websites you have authorization to spider. Aggressive spidering may trigger rate limiting or blocking. Large sites may produce very large wordlists.

SEE ALSO

john(1), hashcat(1), crunch(1)

Copied to clipboard