scrunch

Generate all possible password combinations from charset

It can be used for cracking WPA/WPA2 pre-shared keys with aircrack-ng or similar to apply brute force.

Getting Started

WPA/WPA2 pre-shared keys

Catch WPA/WPA2 pre-shared keys.

Example:

airodump-ng -c CHANNEL --bssid AA:BB:CC:DD:EE:FF -w FILE-CAP MONITOR-INTERFACE-NAME

How to run

Example 1: Feed aircrack-ng with password generator output on charset "ABCDEFabcdef1234567890". 5: Min password length: 5 symbols. 8: Max password length: 8 symbols. --no-rep: Each symbol can repeat only once.

python3 scrunch.py --no-rep 5 8 ABCDEFabcdef1234567890 | aircrack-ng -b AA:BB:CC:DD:EE:FF -w- *.cap

Example 2: Generate wordlist.txt with all possible password combinations using all uppercase, all lowercase and all digits.

python3 scrunch.py --no-rep -u -l -d -ex ABCD -f wordlist.txt 5 5 DUMMY

Where

        5: Min password length: 5 symbols.
        5: Max password length: 5 symbols.
 --no-rep: Each symbol can repeat only once.
 -ex ABCD: Exclude passwords that contain "ABCD" substring.
       -u: Include all uppercase letters
       -l: Include all lowercase letters
       -d: Include all decimal numbers
       -f: Write results to wordlist.txt

Example 3:

python3 scrunch.py --no-rep 3 3 AB12

Output:

Number of combinations: 24
12A
12B
1A2
1AB
1B2
1BA
21A
21B
2A1
2AB
2B1
2BA
A12
A1B
A21
A2B
AB1
AB2
B12
B1A
B21
B2A
BA1
BA2

For help use:

python3 scrunch.py -h

Reference

Refer to the following tutorial for more details on how to get pre-shared keys. https://www.aircrack-ng.org/doku.php?id=cracking_wpa

Authors

• Sergii Kriachko