> For the complete documentation index, see [llms.txt](https://book.ice-wzl.xyz/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://book.ice-wzl.xyz/tool-guides/cewl-crunch.md).

# cewl-crunch

## Cewl

* Custom password list creator

### Example Syntax

```
user@thm$ cewl -w list.txt -d 5 -m 5 http://thm.labs
```

* -w will write the contents to a file. In this case, list.txt.
* -m 5 gathers strings (words) that are 5 characters or more
* -d 5 is the depth level of web crawling/spidering (default 2)
* `http://thm.labs` is the URL that will be used

## Crunch

* crunch is one of many powerful tools for creating an offline wordlist.

### Example Syntax

```
user@thm$ crunch 2 2 01234abcd -o crunch.txt
```

* Creates a wordlist containing all possible combinations of `two` characters including `a-d` and `0-4`.
* -o specifies a file to save to

```
crunch 8 8 0123456789abcdefABCDEF -o crunch.txt
```

* Creates a wordlist containing all possible combinations of `a-f` and `0-9`
* *WARNING* above command creates a file that is 459GB in size

#### Additional Flags

* @ --> lower case alpha characters
* , --> upper case alpha characters
* % --> numberic characters
* ^ --> special characters including spaces

### Example

* If we know part of the password is `pass` followed by two numbers `XX` we can generate a wordlist with the `%` flag.

```
crunch 6 6 -t pass%%
```

* Output of wordlist

```
Crunch will now generate the following amount of data: 700 bytes
0 MB
0 GB
0 TB
0 PB
Crunch will now generate the following number of lines: 100
pass00
pass01
pass02
pass03
```
