{"id":224,"date":"2021-04-25T03:27:51","date_gmt":"2021-04-25T03:27:51","guid":{"rendered":"https:\/\/sirensecurity.io\/blog\/?p=224"},"modified":"2021-07-15T03:04:31","modified_gmt":"2021-07-15T03:04:31","slug":"thats-pretty-cewl","status":"publish","type":"post","link":"https:\/\/sirensecurity.io\/blog\/thats-pretty-cewl\/","title":{"rendered":"That's Pretty Cewl."},"content":{"rendered":"\n
\"\"
\n

S1REN<\/p>\n\n\n\n

That's pretty cewl.<\/p>\n<\/div><\/div>\n\n\n\n

Custom Content?<\/strong> Custom Wordlist!<\/em>
Cewl is cewl.

Kali Website:<\/strong>
+ https:\/\/tools.kali.org\/password-attacks\/cewl<\/p>\n\n\n\n

root@kali:~# cewl<\/strong> --help<\/strong>
CeWL 5.4.3 (Arkanoid) Robin Wood (robin@digi.ninja) (https:\/\/digi.ninja\/)
Usage: cewl [OPTIONS] ... <url><\/p>\n\n\n\n

    OPTIONS:
    -h, --help: Show help.
    -k, --keep: Keep the downloaded file.
    -d <x>,--depth <x>: Depth to spider to, default 2.
    -m, --min_word_length: Minimum word length, default 3.
    -o, --offsite: Let the spider visit other sites.
    -w, --write: Write the output to the file.
    -u, --ua <agent>: User agent to send.
    -n, --no-words: Don't output the wordlist.
    --with-numbers: Accept words with numbers in as well as just letters
    -a, --meta: include meta data.
    --meta_file file: Output file for meta data.
    -e, --email: Include email addresses.
    --email_file <file>: Output file for email addresses.
    --meta-temp-dir <dir>: The temporary directory used by exiftool when parsing files, default \/tmp.
    -c, --count: Show the count for each word found.
    -v, --verbose: Verbose.
    --debug: Extra debug information.

    Authentication
    --auth_type: Digest or basic.
    --auth_user: Authentication username.
    --auth_pass: Authentication password.

    Proxy Support
    --proxy_host: Proxy host.
    --proxy_port: Proxy port, default 8080.
    --proxy_username: Username for proxy, if required.
    --proxy_password: Password for proxy, if required.

    Headers
    --header, -H: In format name:value - can pass multiple.

    <url>: The site to spider.<\/p>\n\n\n\n

Example - Custom Wordlist:<\/strong>
$ cewl<\/strong> -d<\/strong> 2 -m<\/strong> 5 -w<\/strong> \/directory\/thatsCewl.txt https:\/\/exampledomain.com\/
-d<\/strong> <x>,--depth <x>: Depth to spider<\/span><\/em> to, default 2.
-m<\/strong>, --min_word_length: Minimum word length<\/span><\/em>, default 3.
-w<\/strong>, --write: Write the output to the file<\/span>.<\/em><\/p>\n\n\n\n


I pretty much think to use this whenever I see custom content. An understanding of password policy combined with password manipulations tools is very powerful<\/em>.
<\/p>\n","protected":false},"excerpt":{"rendered":"

Custom Content? Custom Wordlist!Cewl is cewl. Kali Website:+ https:\/\/tools.kali.org\/password-attacks\/cewl root@kali:~# cewl --helpCeWL 5.4.3 (Arkanoid) Robin Wood (robin@digi.ninja) (https:\/\/digi.ninja\/)Usage: cewl [OPTIONS] ... <url>     OPTIONS:    -h, --help: Show help.    -k, --keep: Keep the downloaded file.    -d <x>,--depth <x>: Depth to spider to, default 2.    -m, --min_word_length: Minimum word length, default 3.  […]<\/p>\n","protected":false},"author":1,"featured_media":90,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[15,19,18,17,12,4,16],"class_list":["post-224","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-s1ren","tag-cewl","tag-custom-list","tag-custom-wordlist","tag-kali-linux","tag-pentest","tag-s1ren","tag-tool"],"_links":{"self":[{"href":"https:\/\/sirensecurity.io\/blog\/wp-json\/wp\/v2\/posts\/224","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sirensecurity.io\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sirensecurity.io\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sirensecurity.io\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sirensecurity.io\/blog\/wp-json\/wp\/v2\/comments?post=224"}],"version-history":[{"count":2,"href":"https:\/\/sirensecurity.io\/blog\/wp-json\/wp\/v2\/posts\/224\/revisions"}],"predecessor-version":[{"id":420,"href":"https:\/\/sirensecurity.io\/blog\/wp-json\/wp\/v2\/posts\/224\/revisions\/420"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sirensecurity.io\/blog\/wp-json\/wp\/v2\/media\/90"}],"wp:attachment":[{"href":"https:\/\/sirensecurity.io\/blog\/wp-json\/wp\/v2\/media?parent=224"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sirensecurity.io\/blog\/wp-json\/wp\/v2\/categories?post=224"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sirensecurity.io\/blog\/wp-json\/wp\/v2\/tags?post=224"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}