CRUNCH(1) General Commands Manual CRUNCH(1) NAME crunch - generate wordlists from a characterset SYNOPSIS crunch <min-len> <max-len> [<charset string>] [options] DESCRIPTION Crunch can create a wordlist based on criteria you specify. The output from crunch can be sent tothe screen, file, orto another program. The required parameters are: min-len The minimum lengthstring you want crunch to start at. This option is required even for parameters that won't use the value. max-len The maximum lengthstring you want crunch toendat. This option is required even for parameters that won't use the value. charset string You may specify character sets for crunch to use onthe command line orif you leave it blank crunch will use the default character sets. The order MUST BE lower case characters, upper case characters, numbers, andthen symbols. If you don't follow this order you will notgetthe results you want. You MUST specify either values forthecharacter type or a plus sign. NOTE: If you want to include thespacecharacterin your character set you must escape it using the \ characteror enclose your characterset in quotes i.e. "abc ". See the examples 3, 11, 12, and13for examples. OPTIONS -b number[type] Specifies the size ofthe output file, only works if -o START is used, i.e.: 60MB The output files will be inthe format of starting letter-end‐ ing letter for example: ./crunch 45 -b 20mib -o START will generate 4 files: aaaa-gvfed.txt, gvfee-ombqy.txt, ombqz-wcydt.txt, wcydu-zzzzz.txt valid values for type are kb, mb, gb, kib, mib, and gib. The first three types are based on1000whilethelast three types are based on1024. NOTE There is no spacebetweenthenumberand type. For example 500mb is cor‐ rect 500 mb is NOT correct. -c number Specifies thenumberof lines towriteto output file, only works if -o START is used, i.e.: 60 The output files will be inthe format of starting letter-ending letter for example: ./crunch 11 -f /pentest/pass‐ word/crunch/charset.lst mixalpha-numeric-all-space -o START -c 60 will resultin2 files: a-7.txt and8-\ .txt The reason forthe slash inthe second filename isthe ending characterisspaceand ls has to escape itto print it. Yes you will need toputinthe \ when specifying the filename because thelastcharacteris a space. -d numbersymbol Limits thenumberof duplicate characters. -d 2@ limits the lower case alphabet to output like aab and aac. aaa would not be generated asthatis 3 consecutive letters of a. The format isnumberthen symbol wherenumber isthe maximum numberof consecutive charactersand symbol isthe symbol of thethecharacterset you want to limit i.e. @,%^ See examples 17-19. -e string Specifies when crunch should stop early -f /path/to/charset.lst charset-name Specifies a charactersetfromthe charset.lst -i Inverts the output so instead of aaa,aab,aac,aad, etc you get aaa,baa,caa,daa,aba,bba, etc -l When you use the -t option this option tells crunch which symbols should be treated as literals. This will allow you to use the placeholders as let‐ ters inthe pattern. The -l option should be the same lengthasthe -t option. See example 15. -m Merged with -p. Please use -p instead. -o wordlist.txt Specifies thefiletowritethe output to, eg: wordlist.txt -p charset OR -p word1 word2 ... Tells crunch to generate wordsthat don't have repeating characters. By default crunch will generate a wordlist size of#of_chars_in_charset ^ max_length. This option will instead generate #of_chars_in_charset!. The ! stands for factorial. For example saythe charset is abc and max length is4.. Crunch will by default generate 3^4 = 81words. This option will instead generate 3! = 3x2x1 = 6words (abc, acb, bac, bca, cab, cba). THIS MUST BE THE LAST OPTION! This option CANNOT be used with -s andit ignores min and max length however you must still specify two numbers. -q filename.txt Tells crunch toread filename.txt and permute what isread. This is like the -p option except it gets the input from filename.txt. -r Tells crunch to resume generate wordsfromwhereit left off. -r only works if you use -o. You must use the same command asthe original command used to generate thewords. The only exception to this isthe -s option. If your original command used the -s option you MUST remove itbefore you resume the session. Just add -r totheendofthe original command. -s startblock Specifies a starting string, eg: 03god22fs -t @,%^ Specifies a pattern, eg: @@god@@@@ wherethe only the @'s, ,'s, %'s, and ^'s will change. @ will insert lower case characters , will insert upper case characters % will insert numbers ^ will insert symbols -u The -u option disables the printpercentage thread. This should be thelast option. -z gzip, bzip2, lzma, and7z Compresses the output fromthe -o option. Valid parameters are gzip, bzip2, lzma, and7z. gzip isthe fastest butthe compression is minimal. bzip2 is a little slower than gzip but has better compression. 7z is slowest but has the best compression.
