less than 1 minute read

Password cracking often takes a long time. Brute force is normally your last option. But before that, a wordlist usually helps guess the password faster.

Popular wordlists like Rockyou are good for general cases, but making password lists specific to the user can produce faster results. One of the best data sources to produce a customized wordlist is a target’s RAM.

We show how to use strings to extract password candidates from a RAM dump and use the resulting wordlist with Hashcat, a high-powered password cracking software.