names-wordlist is a command line tool that extracts popular first names from Wikipedia dumps to generate a
wordlist for password cracking.
The wordlist addresses the pattern {first name}{name}{special character} that is commonly found in passwords.
The list has been highly effective in cracking passwords over the last few years.
To generate a wordlist, names-wordlist downloads the latest dump of the German Wikipedia and parses it for
person data (i.e. the {{Personendaten}} template). For each match, the first name is extracted and added to a
histogram. When a first name has occured more than N times (where N is configurable, but defaults to 1)
it is stored in the wordlist.
In addition, each first name is written in lower-, upper-, and title-case and is appended by digits (of up to
4 digits by default) and special characters (!, $, @, and _ by default).
Pre-built binaries are available from the
release page. Simply download, make
executable, and move it to a folder in your PATH:
curl -L https://github.com/crissyfield/names-wordlist/releases/download/v1.0.0/names-wordlist-`uname -s`-`uname -m` > /tmp/names-wordlist
chmod +x /tmp/names-wordlist
sudo mv /tmp/names-wordlist /usr/local/bin/names-wordlistPre-generated wordlists can be downloaded directly from the release page as well.
| Wordlist | Name Count | Digits | Special Characters | Uncompressed |
|---|---|---|---|---|
names-de-1count-4digits-special.txt |
45,534 | Up to 4 | !, $, @, _ |
85.15 GiB |
names-de-2count-4digits-special.txt |
18,137 | Up to 4 | !, $, @, _ |
33.11 GiB |
names-de-4count-4digits-special.txt |
19,078 | Up to 4 | !, $, @, _ |
18.26 GiB |
names-de-8count-4digits-special.txt |
6,004 | Up to 4 | !, $, @, _ |
10.87 GiB |
names-de-16count-4digits-special.txt |
3,649 | Up to 4 | !, $, @, _ |
6.59 GiB |
names-de-32count-4digits-special.txt |
2,219 | Up to 4 | !, $, @, _ |
4.00 GiB |
💬 Note: The biggest dictionary takes roughly 6 minutes on an NVIDIA GeForce 1080Ti to crack NTLMv2 hashes.
Run names-wordlist in the command line like this:
names-wordlist output.lstFor instance, with Hashcat:
# Crack some NTLMv2 hashes
./hashcat64.bin -O --hash-type=5600 --attack-mode=0 hashes.txt names-de-1count-4digits-special.txtCopyright (c) 2019 Crissy Field GmbH. Released under the MIT License.
Dictionary icon made by Freepik from www.flaticon.com.