Password cracking often takes a long time. Brute force is normally your last option. But before that, a wordlist usually helps guess the password faster.
Popular wordlists like Rockyou are good for general cases, but making password lists specific to the user can produce faster results. One of the best data sources to produce a customized wordlist is a target’s RAM.
Thank you to our Members and Patrons, but especially to our Investigators, TheRantingGeek, Roman, and Alexis Brignoni! Thank you so much!
We show how to use strings to extract password candidates from a RAM dump and use the resulting wordlist with Hashcat, a high-powered password cracking software.
00:00 Custom wordlists for Hashcat
00:45 Why use memory for wordlists?
02:07 What you need to begin
02:50 Dump strings from memory with strings
05:09 Count the total number of password candidates from memory
05:49 Optimize by removing duplicates
07:36 Optimize by removing obviously wrong strings
08:16 Use the wordlist…