Wikiraider Save

Want to crack passwords faster by using a wordlist that fits your 'target audience'? Use WikiRaider.
Goal • Wordlists • Parsing • Cracking • Limitations • Issues • License
_{Built with ❤ by the Northwave Red Team}

Goal

In the Northwave Red Team we crack password hashes during penetration tests and red team engagements, mostly using hashcat and john-the-ripper. Cracking these hashes based on certain wordlists is generally faster than brute-forcing the entire alphabet of possibilities. As long as the wordlist in use is related to the hashes you are cracking of course. But how do you find wordlists that are related to the passwords hashes you are trying to crack?

WikiRaider to the rescue! WikiRaider enables you to generate wordlists based on country specific databases of Wikipedia. This will provide you with not only a list of words in a specific language, it will also provide you with e.g. country specific artists, TV shows, places, etc.

Wordlists

Parsing a Wikipedia database takes a while. If you've parsed a database, feel free to contribute by adding it to this list.

DE (German), 184MB (download)

wget -O dewiki-2020-07-27 https://northwave-my.sharepoint.com/:t:/g/personal/tijme_gommers_northwave_nl/EQWaUMooHJlKqoVKArMJp2sBxzCtdVPNEWQkDTy5Qt2z5Q?e=5AwBgA&download=1

EN (English), 257MB (download)

wget -O enwiki-2020-05-07 https://northwave-my.sharepoint.com/:t:/g/personal/tijme_gommers_northwave_nl/EfezyXZilsFFpEpRgvWSJ40BtG5VgklAyZtuRjUylWqOWA?e=DuGj6k&download=1

ES (Spanish), 78MB (download)

wget -O eswiki-2020-05-05 https://northwave-my.sharepoint.com/:t:/g/personal/tijme_gommers_northwave_nl/ET2MwgudOYVLtActeZcuC14BQRpYRy_cSeVcF0OS8NexhQ?e=Jl4RjB&download=1

FR (French), 96MB (download)

wget -O frwiki-2021-12-09 https://northwave-my.sharepoint.com/:t:/g/personal/tijme_gommers_northwave_nl/EZYCVX6ldrFIrBYcYhlqYA0BYmC34oN4HAemDpk1jPc_wA?e=sM5NZQ&download=1

NL (Dutch), 58MB (download)

wget -O nlwiki-2020-05-05 https://northwave-my.sharepoint.com/:t:/g/personal/tijme_gommers_northwave_nl/EVag_OlaZLZCrV2aYVpejmUBA0Q52aeei4wYW1mL8X3UUw?e=owwMab&download=1

PT (Portuguese), 49MB (download)

wget -O ptwiki-2021-02-24 https://northwave-my.sharepoint.com/:t:/g/personal/tijme_gommers_northwave_nl/EaoW0iwbv5lEsvlJe4pYSCIBkjuAKSC_byDWRRjAL0z6TQ?e=73dWNR&download=1

Parsing

Listing Wikipedia databases

Find all databases:

./wikiraider.py list

Search (based on language code):

./wikiraider.py list -s EN

If your preferred database is not listed, Wikipedia might be exporting backups. Check the backup index to see if any backup exports are running.

Parsing a Wikipedia database

Parse the Dutch Wikipedia database

./wikiraider.py parse -u https://dumps.wikimedia.org/nlwiki/20200401

Parsing a database will take a while and requires quite some processing power and memory. WikiRaider is multi-threaded and for performance it loads all words (as a hashset) into memory.

Cracking

NTLM

Lets say you want to crack NTLM hashes from a NTDS file. Using your WikiRaider wordlist, you can run the following command on dump.ntds. A rule (OneRuleToRuleThemAll) is used to forge the words to passwords.

hashcat -m HASH_MODE NTDS_DUMP WORDLIST -r RULESET -vvv

hashcat -m 1000 dump.ntds -vvv nlwiki-2020-05-05.txt -r OneRuleToRuleThemAll.rule

Limitations

Currently only words that comply with the regex [A-zÀ-ú]+ are gathered. This is due to the fact that I'm not familiar with languages outside of this alphabet space. In a future release of WikiRaider I will try to provide you with options to parse words outside of this alphabet space. If you have a proper solution, feel free to contribute.

Issues

Issues or new features can be reported via the GitHub issue tracker. Please make sure your issue or feature has not yet been reported by anyone else before submitting a new one.

License

Wikiraider is open-sourced software licensed under the MIT license.