When we need to fuzz or brute force the website (of course you must have the authority for that…), we should use some wordlists or combos.
Regarding wordlists, it is enough to use SecLists in most cases.
But when combolists like “username:password” are required at time, we may have to create them ourselves.
That’s why I write how to generate the custom combolist you want in thie post.
If you would like to generate it quickly, please use my combo generator.
First, create a new directory and prepare two wordlists, usernames.txt and passwords.txt.
For example, here are the contents of each wordlist.
Next, create a Python file for generating a combolist from two wordlists, usernames.txt and passwords.txt.
WORDLIST_1 = "usernames.txt"
- WORDLIST_1, WORDLIST_2: The two wordlists you created.
- OUTPUT: The name of the output file to be generated as a result.
Check if three files exist in the directory.
generator.py passwords.txt usernames.txt
If OK, run the generator.py.
Then, you should see the combolist.txt generated.