Tuesday, 12 July 2011

Brute Forcing Usernames

Most companies create usernames for staff based on some combination of firstname-lastname.

This script will print out all combinations of each name longer than 4 characters. A little social engineering of your target should be enough to get you firstname/lastname pairs that you're interested in.

The script is deliberately short, easy enough to add number styles, dots or special characters depending on what your use is.


first = 'steffan'
last = 'jones'

firstPem = []
firstLen = len(first)
for x in range(1,firstLen+1):

lastPem = []
lastLen = len(last)
for x in range(1,lastLen+1):

for f in firstPem:
for l in lastPem:
print f+l
print l+f