Create a super password list with DyMerge using Kali Linux

Creating a target-specific good password list is a very hard thing. Collecting tools to brute force on website admin panel or wifi access point is a very simple or an easier thing but guessing the perfect probable words that the victim can use is the hardest step.

In this article, we’re gonna demonstrate you a tool called Dymerge that we used recently which can generate wordlist with most probable keyword combinations.

A little about Dymerge tool:

Dymerge tool is basically a python script created by a GitHub contributor Nikolas  Kamarinakis k4m4. The full form of the tool is the Dynamic Dictionary Merger. It can be used as ammunition for the successful dictionary-based attack. This is really a very cool script. It basically merges many wordlists to make a powerful wordlist.

Configure Dymerge in Kali Linux:

Step 1:

First, open up the terminal in your Kali Linux machine and download/clone the tool from Github from the link given below.

If specified the directory to save then follow the directory and if it didn’t then it will be saved in the root directory. Now follow the directory by giving the command-

cd /root/dymerge

Create a super password list with DyMerge using Kali Linux-crackitdown

or type cd and drag the folder to the terminal and hit enter. Now type ls to expand the folder. Here you will see a script named with Load the script by giving the command- 

python -h

Create a super password list with DyMerge using Kali Linux-crackitdown

The -h command will show the parameters that you can use. If you don’t have python installed on your machine the script will not load. To install python, open another terminal and type 

apt-get install python

So here we successfully loaded the dymerge help file. The parameters seem very simple but very powerful.

Step 2:

So here we have to find and download a wordlist that can be merged using a dymerge script. There is a website called skullsecurity has a wiki of passwords. You can download the leaked passwordlist from the wiki of in different categories. These are very cool collections. These are probably the best collections.

So, we downloaded the elitehacker.txt.biz2, facebook-phished.txt.bz2, facebook-pastebay.txt.bz2 file from the wiki. This is a zip file so we need to extract the file before using it. Extracting the file in the terminal. Go to the location where the file is. In our case, we moved the file from downloads to the desktop. To extract it just give the command-

bzip2 -d elitehacker.txt.bz2

So, the file extracted successfully and now we have the file elitehacker.txt, facebook-phished.txt, facebook-pastebay.txt. If you open the text file you will see raw data. So we’re gonna merge them all together to create a super wordlist.

Step 3:

We saved all wordlists in a folder named wordlists on the desktop so that we can call them easily. Now follow the commands.

python /root/desktop/wordlists/elitehacker.txt root/desktop/wordlists/facebook-phished.txt root/desktop/wordlists/facebook-pastebay.txt -s -u -o wordlist.txt -z bz2

Create a super password list with DyMerge using Kali Linux-crackitdown

 It will start merging the words, removing the duplicate words. It will be saved as wordlist.txt.bz2 in the dymerge folder in the root directory. It will be a very large file around 20-50 MB and it will take some time to get extracted.
Have a happy hacking journey and stay in touch with us. Good luck.