panalyzer - GitLite

KO | EN

gitlite — search

#automation #macos #gpt #database #llm #mcp #open-source #nodejs #java #artificial-intelligence

panalyzer

(★ 16)

Panalyzer is a handy character frequency analyzer.

파일 탐색기

ZIP 다운로드

panalyzer.py
password.py
README.md

# CDN으로 사용하기

jsDelivr

jsDelivr는 공개 GitHub 리포지토리를 별도 설정 없이 CDN으로 즉시 서빙합니다. 버전과 파일을 고르면 웹페이지에 바로 붙일 수 있는 링크와 예시 코드가 만들어집니다.

버전

파일

링크

예시

명령어 용어집

이 문서에서 사용된 명령어를 모아봤습니다. 낯선 명령어가 있다면 펼쳐서 확인해보세요.

🔍

`write`

설명 보기 ▼

데이터를 메모리에 저장.
더 많은 정보: <https://www.oreilly.com/library/view/cisco-ios-in/0596008694/re869.html#book-content>.

write memory

현재 설정을 메모리에 저장:

write {{username}} {{terminal_id}}

지정된 사용자에게 주어진 터미널 ID로 메시지 전송:

write {{username}} {{terminal_id}}

Send a message to a given user on a given terminal ID:

🔍

`hashcat`

설명 보기 ▼

빠른 고급 비밀번호 복구 도구.
더 많은 정보: <https://hashcat.net/wiki/doku.php?id=hashcat>.

hashcat {{[-m|--hash-type]}} {{hash_type_id}} {{[-a|--attack-mode]}} 3 {{hash_value}}

기본 hashcat 마스크를 사용하여 무차별 대입 공격(모드 3)을 수행:

hashcat {{[-m|--hash-type]}} {{hash_type_id}} {{[-a|--attack-mode]}} 3 {{hash_value}} "{{?d?d?d?d}}"

알려진 4자리 패턴으로 무차별 대입 공격(모드 3)을 수행:

hashcat {{[-m|--hash-type]}} {{hash_type_id}} {{[-a|--attack-mode]}} 3 --increment {{hash_value}} "{{?a?a?a?a?a?a?a?a}}"

인쇄 가능한 모든 ASCII 문자 중 최대 8개를 사용하여 무차별 대입 공격(모드 3)을 수행:

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

Panalyzer is a handy character frequency analyzer that outputs hashcat masks and intersting frequency statistics using a password list as input. I started this for kicks, and decided to share. The shift to Numpy slices really improved performnce. Is it useful? Who knows. But, it is neat to see password topology trends over a domain.

## Usage:

```
usage: panalyzer [-h] [-c] [-m [MASK]] [-k [KEYSPACE]] [-r] [--min MIN]
                 [--max MAX] [-l LIMIT] [-v]
                 passfile

Panalyzer - Lets analyze some passwords!

positional arguments:
  passfile              Password file to be processed.

options:
  -h, --help            show this help message and exit
  -c, --csv             Output as CSV
  -m, --mask [MASK]     Generate hashcat mask based on character frequency and
                        write to a specified file, or stdout if no file is
                        specified.
  -k, --keyspace [KEYSPACE]
                        Output the keyspace of the password file to a
                        specified file, or stdout if no file is specified.
  -r, --rank            Output character frequency data
  --min MIN             Minimum string length to process, default 6
  --max MAX             Maximum string length to process, default 12
  -l, --limit LIMIT     Limit frequency summaries to the top N results
  -v, --verbose         Increase output verbosity, -vv (very verbose)

Panalyzer v1.0 - Shawn Evans - shawndevans@gmail.com

```

## Generate a mask with custom charset:
Keyspace is king in the world of brute force, and any reduction of the keyspace results in cracking efficiency gains. With this in mind, the keyspace feature analyzses postional frequency trends and retunrs only those characters found in the top 'N' results, just like below. (btw - don't worry if there isn't a 1:1 between ranked results and masks, duplicate masks are removed)  
```
$ ./panalyzer.py --min 7 --max 10 -l 15 cracked_pws.txt -k
abcdefghijklmnoprstuy,,0123456789,!,?1?1?1?1?1?1?1
abcdefghijklmnoprstuy,,0123456789,!,?1?1?1?1?1?3?1
abcdefghijklmnoprstuy,,0123456789,!,?1?1?1?1?1?1?3
abcdefghijklmnoprstuy,,0123456789,!,?1?1?1?3?3?1?3
abcdefghijklmnoprstuy,,0123456789,!,?1?1?1?1?1?3?3
abcdefghijklmnoprstuy,,0123456789,!,?1?3?1?1?1?1?4
abcdefghijklmnoprstuy,,0123456789,!,?1?1?1?1?3?3?3
abcdeghiklmnoprstuy,ABCDFJKLMNPRST,0123456789,!$*@,?2?1?1?1?1?3?3?4
abcdeghiklmnoprstuy,ABCDFJKLMNPRST,0123456789,!$*@,?2?1?1?1?1?1?3?3
abcdeghiklmnoprstuy,ABCDFJKLMNPRST,0123456789,!$*@,?2?1?1?1?3?3?3?3
abcdeghiklmnoprstuy,ABCDFJKLMNPRST,0123456789,!$*@,?2?1?1?1?1?3?1?4
abcdeghiklmnoprstuy,ABCDFJKLMNPRST,0123456789,!$*@,?1?1?1?1?1?3?1?1
abcdeghiklmnoprstuy,ABCDFJKLMNPRST,0123456789,!$*@,?2?1?1?1?1?3?3?3
abcdeghiklmnoprstuy,ABCDFJKLMNPRST,0123456789,!$*@,?2?1?1?1?1?3?1?3
abcdeghiklmnoprstuy,ABCDFJKLMNPRST,0123456789,!$*@,?2?1?1?1?1?1?1?4
abcdeghiklmnoprstuy,ABCDFJKLMNPRST,0123456789,!$*@,?2?1?1?1?3?1?3?3
abcdehiklmnoprstuy,ABCDFHJLMNPRSTW,0123456789,!#$*@,?2?1?1?1?1?3?3?3?4
abcdehiklmnoprstuy,ABCDFHJLMNPRSTW,0123456789,!#$*@,?2?1?1?1?1?1?3?1?3
abcdehiklmnoprstuy,ABCDFHJLMNPRSTW,0123456789,!#$*@,?2?1?1?1?3?1?1?3?3
abcdehiklmnoprstuy,ABCDFHJLMNPRSTW,0123456789,!#$*@,?2?1?1?1?4?1?3?1?4
abcdehiklmnoprstuy,ABCDFHJLMNPRSTW,0123456789,!#$*@,?2?1?1?1?3?1?1?1?4
abcdehiklmnoprstuy,ABCDFHJLMNPRSTW,0123456789,!#$*@,?2?1?1?1?1?3?3?3?3
abcdehiklmnoprstuy,ABCDFHJLMNPRSTW,0123456789,!#$*@,?2?1?1?1?1?1?3?1?4
abcdehiklmnoprstuy,ABCDFHJLMNPRSTW,0123456789,!#$*@,?2?1?1?1?1?1?3?3?3
abcdehiklmnoprstuy,ABCDFHJLMNPRSTW,0123456789,!#$*@,?2?1?1?1?1?1?1?3?3
abcdehiklmnoprstuy,ABCDFHJLMNPRSTW,0123456789,!#$*@,?2?1?1?1?1?1?4?1?4
abcdehiklmnoprstuwy,ABCDFJKMNPRSTW,0123456789,!#$*@,?2?4?1?1?3?1?1?3?1?4
abcdehiklmnoprstuwy,ABCDFJKMNPRSTW,0123456789,!#$*@,?2?1?1?1?1?1?3?1?3?3
abcdehiklmnoprstuwy,ABCDFJKMNPRSTW,0123456789,!#$*@,?1?1?1?1?1?3?1?1?3?3
abcdehiklmnoprstuwy,ABCDFJKMNPRSTW,0123456789,!#$*@,?2?1?1?1?1?1?1?3?3?3
abcdehiklmnoprstuwy,ABCDFJKMNPRSTW,0123456789,!#$*@,?2?1?1?1?1?3?1?3?4?4
abcdehiklmnoprstuwy,ABCDFJKMNPRSTW,0123456789,!#$*@,?2?1?1?1?1?3?1?1?3?3
abcdehiklmnoprstuwy,ABCDFJKMNPRSTW,0123456789,!#$*@,?2?1?1?1?1?1?1?3?1?4
abcdehiklmnoprstuwy,ABCDFJKMNPRSTW,0123456789,!#$*@,?2?1?1?1?1?1?3?3?3?3
abcdehiklmnoprstuwy,ABCDFJKMNPRSTW,0123456789,!#$*@,?2?1?1?1?1?1?1?1?1?3
abcdehiklmnoprstuwy,ABCDFJKMNPRSTW,0123456789,!#$*@,?2?1?1?1?1?1?3?3?3?4
abcdehiklmnoprstuwy,ABCDFJKMNPRSTW,0123456789,!#$*@,?2?1?1?1?1?1?1?1?3?3
abcdehiklmnoprstuwy,ABCDFJKMNPRSTW,0123456789,!#$*@,?2?1?1?1?1?1?3?1?1?4

```

## Password frequency stats:
```
$ ./panalyzer.py --min 7 --max 10 -l 5 ~/wordlists/password.lst -r
[*] Character frequency analysis completed for length: 7, Passwords: 606 (43.22%)
[*] 1. [(65, 's'), (110, 'a'), (64, 'n'), (60, 't'), (81, 'i'), (106, 'e'), (74, 'e')]
[*] 2. [(56, 'c'), (96, 'e'), (57, 'a'), (45, 'r'), (81, 'e'), (70, 'r'), (63, 's')]
[*] 3. [(39, 'b'), (79, 'o'), (56, 'r'), (44, 'e'), (61, 'a'), (61, 'n'), (60, 'n')]
[*] 4. [(38, 'p'), (66, 'i'), (54, 'c'), (42, 'n'), (49, 'o'), (52, 'i'), (55, 'r')]
[*] 5. [(38, 'm'), (48, 'u'), (43, 'l'), (35, 'i'), (40, 't'), (47, 'o'), (49, 'y')]
[*] Character frequency analysis completed for length: 8, Passwords: 561 (40.01%)
[*] 1. [(41, 'c'), (99, 'a'), (61, 'r'), (63, 'e'), (45, 'e'), (62, 'e'), (59, 'a'), (52, 'e')]
[*] 2. [(37, 's'), (79, 'o'), (48, 'n'), (47, 'n'), (38, '2'), (57, 'i'), (54, 'e'), (39, 's')]
[*] 3. [(32, 'm'), (61, 'e'), (48, 'c'), (43, 't'), (36, 'a'), (43, 'a'), (38, 'n'), (38, 'n')]
[*] 4. [(25, 'a'), (59, 'i'), (46, 'a'), (33, 'r'), (35, 'i'), (33, 'r'), (35, 'r'), (35, 'r')]
[*] 5. [(22, 'p'), (39, 'r'), (40, 'o'), (28, 'a'), (34, 'l'), (33, 'n'), (34, 'i'), (35, '1')]
[*] Character frequency analysis completed for length: 9, Passwords: 166 (11.84%)
[*] 1. [(12, 'P'), (32, 'a'), (18, 'a'), (13, 'e'), (24, 'e'), (17, '2'), (14, 'o'), (22, '1'), (22, '1')]
[*] 2. [(12, 'B'), (20, 'o'), (15, 'c'), (11, 'n'), (16, 'a'), (15, 'r'), (14, '3'), (21, '2'), (16, '5')]
[*] 3. [(11, 's'), (20, 'e'), (14, 'n'), (10, 'o'), (14, 's'), (15, '1'), (12, 'e'), (11, 'e'), (14, 'e')]
[*] 4. [(11, 'c'), (17, 'i'), (14, 'l'), (9, 'l'), (10, 'o'), (11, 'l'), (11, '1'), (9, 'o'), (14, '3')]
[*] 5. [(11, 'A'), (15, 'h'), (12, 'o'), (9, 'c'), (9, 'n'), (10, 'n'), (11, '0'), (9, 'n'), (12, '9')]
[*] Character frequency analysis completed for length: 10, Passwords: 69 (4.92%)
[*] 1. [(10, 'B'), (15, 'o'), (8, 'n'), (9, 'e'), (8, 'e'), (6, 'o'), (12, '1'), (9, '0'), (16, '1'), (10, '5')]
[*] 2. [(7, 'M'), (15, 'a'), (8, 'c'), (7, 'n'), (7, '1'), (6, 'n'), (8, '2'), (5, '5'), (8, '6'), (9, '1')]
[*] 3. [(4, 'S'), (8, 'i'), (7, 's'), (5, 't'), (6, 'i'), (6, 'e'), (7, 'r'), (5, '4'), (6, 'l'), (7, '6')]
[*] 4. [(4, 'A'), (8, 'e'), (7, 'i'), (5, 's'), (5, 'a'), (5, 'a'), (6, 'e'), (5, '2'), (5, '5'), (4, '8')]
[*] 5. [(3, 'p'), (5, 'h'), (6, 'v'), (4, 'r'), (5, '2'), (5, '2'), (4, 'n'), (4, 'r'), (5, '4'), (4, '7')]

```

## Use a mask file or custom charset with Haschat:

1. lets generate a mask from your favorite password list.

```
$ ./panalyzer.py ~/wordlists/password.lst -m --min 6 --max 10 -l 6 > ~/mymask.hcmask

```

2. Fire up hashcat for a mask attack.
```
$ hashcat -m 1000 -O -w 3 -a 3 hashes.txt ~/mymask.hcmask
```

3. Enjoy passwords :)