Tuesday, 12 July 2011

Brute Forcing Usernames

Most companies create usernames for staff based on some combination of firstname-lastname.

This script will print out all combinations of each name longer than 4 characters. A little social engineering of your target should be enough to get you firstname/lastname pairs that you're interested in.

The script is deliberately short, easy enough to add number styles, dots or special characters depending on what your use is.

#!/usr/bin/python

first = 'steffan'
last = 'jones'

firstPem = []
firstLen = len(first)
for x in range(1,firstLen+1):
firstPem.append(first[0:x])

lastPem = []
lastLen = len(last)
for x in range(1,lastLen+1):
lastPem.append(last[0:x])

for f in firstPem:
for l in lastPem:
if(len(l+f)>3):
print f+l
print l+f