weakpwd.py

#!/usr/bin/env python

import argparse

#------------------------------------------------------------------------------
# Functions
#------------------------------------------------------------------------------


def list_from_file(filename):
    tmp = []
    try:
        f = open(filename, 'r')
    except:
        print("Could not open file: {0}".format(filename))

    for line in f:
        yield line.rstrip('\r\n')


def simple_combos(word):
    adds = []

    adds.extend(['!', '@', '#', '$', '%', '^', '&', '*', '?'])

    for i in xrange(0, 10):
        adds.append(str(i))
        adds.append("0" + str(i))

    yield word

    for a in adds:
        yield word + a


def combos(word):
    adds = []

    adds.extend(['$', '123', '456', '789', '69', '6969', '89', '99', '1234'])
    adds.extend(['33', '44', '55', '66', '77', '88', '1977', '1978', '1979'])
    adds.extend(['1234', '4321', '007', '2112', '!', '@', '#', ])

    for i in xrange(0, 10):
        adds.append(str(i))
        adds.append("0" + str(i))

    for i in xrange(10, 23):
        adds.append(str(i))

    for i in xrange(2000, 2019):
        adds.append(str(i))

    yield word
    yield word + word
    for a in adds:
        yield word + a
        yield a + word


def password_combos(plist):
    for p in plist:
        if args.s is True:
            for pwd in simple_combos(p.capitalize()):
                yield pwd
        else:
            for pwd in combos(p):
                yield pwd
            for pwd in combos(p.capitalize()):
                yield pwd


def write_userpass(u, p):
    print('{0} {1}'.format(u, p))


def write_pass(p):
    print('{0}'.format(p))

#------------------------------------------------------------------------------
# Main Program
#------------------------------------------------------------------------------

#Parse command line arguments using argparse
desc = """weak_passwords.py takes a username or userlist, a company name or
company list (optional) and a wordlist (optional) and creates username and
password combinations formatted for use in Metasploit. The passwords are transformed
using some of the best64 rules from hashcat.
"""
parser = argparse.ArgumentParser(description=desc)
usergroup = parser.add_mutually_exclusive_group(required=False)
usergroup.add_argument('-u', action='store', default=None, metavar="USERS",
                    help='Comma delimited list of usernames')
usergroup.add_argument('-U', action='store', default=None, metavar="USERFILE",
                    help='File with list of Usernames.')
compgroup = parser.add_mutually_exclusive_group(required=False)
compgroup.add_argument('-c', action='store', default=None, metavar="COMPANIES",
                    help='Comma delimited list of company names')
compgroup.add_argument('-C', action='store', default=None, metavar="COMPANYFILE",
                    help='File with list of company names.')
wordgroup = parser.add_mutually_exclusive_group(required=False)
wordgroup.add_argument('-w', action='store', default=None, metavar="WORDS",
                    help='Comma delimited list of words')
wordgroup.add_argument('-W', action='store', default=None, metavar="WORDFILE",
                    help='File with list of words to transform.')
parser.add_argument('-x', action='store_true', default=False,
                    help='Do not use the built in word list.')
parser.add_argument('-p', action='store_true', default=False,
                    help='Only write the passwords.')
parser.add_argument('-s', action='store_true', default=False,
                    help='A simpler set of combinations.')

args = parser.parse_args()
users = []
comps = []
pwds = []
words = []

if args.p is False:
    if args.u:
        users.extend(args.u.split(","))
    if args.U:
        users = list_from_file(args.U)
if args.c:
    comps.extend(args.c.split(","))
if args.C:
    comps = list_from_file(args.C)
if args.w:
    words.extend(args.w.split(","))
if args.W:
    words = list_from_file(args.W)

if args.x is False:
    words.extend ([ "password", "passw0rd", "p@ssword", "p@ssw0rd", "welcome",
                    "welc0me", "w3lcome", "w3lc0me", "changeme", "winter", 
                    "spring", "summer", "fall", "security", "123456", "12345678",
                    "abc123", "qwerty", "monkey", "letmein", "dragon", "111111",
                    "baseball", "iloveyou", "trustno1", "1234567", "sunshine",
                    "master", "123123", "shadow", "shad0w", "ashley", "football",
                    "f00tball", "footb@ll", "f00tb@ll", "jesus", "michael", 
                    "ninja", "mustang"])

pwds.extend(password_combos(comps))
pwds.extend(password_combos(words))

if users == []:
    for pwd in pwds:
        write_pass(pwd)
else:
    for user in users:
        for pwd in pwds:
            write_userpass(user, pwd)
        for pwd in password_combos([user]):
            write_userpass(user, pwd)