LinuxCommandLibrary
GitHubF-DroidGoogle Play Store

cewl

custom wordlist generator from website content

TLDR

Create a wordlist from URL with 2 links depth
$ cewl -d 2 -w [path/to/wordlist.txt] [url]
copy
Output alphanumeric wordlist with minimum 5 characters
$ cewl --with-numbers -m 5 [url]
copy
Output wordlist with verbose output and email addresses
$ cewl -v -e [url]
copy
Use HTTP authentication
$ cewl --auth_type [basic|digest] --auth_user [username] --auth_pass [password] [url]
copy
Output wordlist with word count
$ cewl -c [url]
copy
Use a proxy
$ cewl --proxy_host [host] --proxy_port [port] [url]
copy

SYNOPSIS

cewl [options] url

DESCRIPTION

cewl (Custom Word List generator) spiders a website and creates a wordlist from the content found. This wordlist can be used for password cracking, especially when targeting organizations where passwords may be based on company-specific terms.The tool follows links to a configurable depth and extracts unique words meeting length requirements.

PARAMETERS

-d, --depth n

Spider to link depth n (default: 2)
-w, --write file
Write wordlist to file
-m, --min_word_length n
Minimum word length (default: 3)
--with-numbers
Include words with numbers
-c, --count
Show the count for each word found
-e, --email
Include email addresses found in the page
-a, --meta
Include metadata from the page
-u, --ua AGENT
Set the user agent string
-v, --verbose
Enable verbose output
--auth_type type
Authentication type: basic or digest
--auth_user user
Authentication username
--auth_pass pass
Authentication password
--proxy_host host
Proxy host
--proxy_port port
Proxy port

CAVEATS

Only use on websites you have authorization to spider. Aggressive spidering may trigger rate limiting or blocking. Large sites may produce very large wordlists.

SEE ALSO

john(1), hashcat(1), crunch(1)

Copied to clipboard
Kai