‣

collection of wordlists. They are sorted by their content.

‣

Common User Passwords Profiler

‣

‣

Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.

‣

‣

‣

‣

To generate wordlists of passwords containing cities at a defined distance around the client city.

• -p 75001 Just postal code
• -k 25 Radius around the city in KM

‣

Username tools for penetration testing

https://github.com/digininja/CeWL

Extract potential words from websites:

cewl <https://target.com> -d 4 -m 6 --lowercase -w target.wordlist

🧠 How to Build a Social Engineering Wordlist (Workflow)

1. Identify your target (e.g., “Mark White” from Nexura Ltd)
2. Use tools like:
   • Sherlock to find usernames
   • Maigret or Osintgram to get detailed personal info
   • LinkedInt to scrape colleagues
3. Extract relevant info:
   • Partner, pet, kid names
   • Birthday, location, interests
   • Company name/department
4. Use:
   • CUPP, Mentalist, or WordlistRaider with this info
   • Apply Hashcat rules to expand
   • Optional: Combine with CeWL (for company pages)