/OneWordlistToListThemAll

OneWordlistToListThemAll is a huge mix of password wordlists, proven to be pretty useful to provide some quick hits when cracking several hashes

OneWordlistToListThemAll

What?

OneWordlistToListThemAll is a huge mix of password wordlists, proven to be pretty useful to provide some quick hits when cracking several hashes. Feel free to hit me up if any link in here no longer works.

How?

Just filtering and mixing.

  1. Make sure the source wordlists are not using DOS/Windows line breaks (CR + LF). No need to look for Mac line breaks as they switched from CR to LF long time ago.
dos2unix --force --newfile "${WORDLIST}.txt" "${WORDLIST}-unix.txt"
  1. Sort each wordlist and remove duplicates, using version sort just makes more sense to me.
sort --unique --version-sort --output="${WORDLIST}-unix_sort.txt" "${WORDLIST}-unix.txt"
  1. Get rid of entries containing non-ascii or non-visible characters (except for the space). I'm aware of the built-in POSIX character class [:graph:], but have decided to keep the space in the charset.
LC_ALL='C' grep --text --perl-regexp '^([\x20-\x7E])*$' "${WORDLIST}-unix_sort.txt" > "${WORDLIST}-unix_sort_graph.txt"
  1. Remove all entries longer than 63 characters. As OneWordlistToListThemAll aims to provide some quick hits, it does not make much sense trying passwords that long.
sed --regexp-extended '/.{64,}/d' "${WORDLIST}-unix_sort_graph.txt" > "${WORDLIST}-unix_sort_graph_under64.txt"
  1. Generate OneWordlistToListThemAll.
cat *unix_sort_graph_under64.txt > 'OneWordlistToListThemAll.tmp'
sort --unique --version-sort --output='OneWordlistToListThemAll.txt' 'OneWordlistToListThemAll.tmp'

Wordlists

name size source
Adeptus Mechanicus 1.6 GB .dic.7z files at adeptus-mechanicus.com
breachcompilation 3.9 GB magnet link from a public gist
CrackStation 12.3 GB CrackStation's wordlist
EAP 0.4 GB passwords grabbed while testing WPA/WPA2-MGT fake APs + HashcatRulesEngine using OneRuleToRuleThemAll
Hashes.org 14.5 GB Hashes.org at weakpass.com
Hashkiller.io 2.8 GB Hashkiller.io's wordlist
Have I Been Pwned 6.6 GB Have I Been Pwned leaks at hashes.org (V1 - V6)
Kaonashi 9.4 GB mega link from Kaonashi's repo
Probable Wordlists 21.1 GB biggest file included in Probable-Wordlists' torrent
Weakpass 100.7 GB weakpass_3a at weakpass.com
OneWordlistToListThemAll 103.7 GB nope

Acknowledgements

I'd like to thank the authors of the source wordlists. As stated before, this repo is just a bunch of filtering and mixing other people's work.