OSCP Cheatsheet
  • Reference List
  • Basic
  • Methodology
    • Basic Scans
    • Service Enumeration
      • TCP: HTTP(S) - 80 / 443
      • TCP: SMB - 139 / 445
      • TCP: FTP - 21
      • TCP/UDP: DNS - 53
      • TCP: SSH - 22
      • TCP/UDP: LDAP - 389 / 636 / 3268
      • TCP/UDP: Kerberos - 88
      • UDP: SNMP - 161
      • TCP: SMTP - 25
      • TCP: RDP - 3389
      • TCP: RPC - 135 / 593
      • TCP: Evil-WinRM - 5985 / 5986
      • TCP: MYSQL - 3306
      • TCP: MSSQL - 1433
      • TCP: Confluence - 8090
    • Extras
  • File Transfer
  • KeePass Database
  • Shells
  • Enumeration
    • Linux
    • Windows
    • Git
  • Privilege Escalation
    • Linux
      • Abusing Cron Jobs
      • Abusing Password Authentication
      • Abusing Setuid Binaries and Capabilities
      • Abusing Sudo
      • Exploits
    • Windows
      • Service Binary Hijacking
      • DLL Hijacking
      • Unquoted Service Paths
      • Scheduled Tasks
      • Exploits
  • Port Forwarding
    • Linux
    • Windows
  • Attacks
    • Public Exploits
    • User Creation
    • Password Cracking
      • Custom Rules
      • Custom Password List
    • Phishing
    • SQLi
  • Active Directory
    • Enumeration
    • Attack
    • Lateral Movement
    • Persistence
Powered by GitBook
On this page
  • Common Actions
  • Character Modifications
  • Inserts / Deletes
  • Reversals / Duplications
  • Length Adjustments
  • Advanced Useful Rules
  1. Attacks
  2. Password Cracking

Custom Rules

Common Actions

Action
Rule
Example

Append 1

$1

password → password1

Append 123

$1$2$3

password → password123

Prepend 1

^1

password → 1password

Prepend 123

^1^2^3

password → 321password

Append !

$!

password → password!

Prepend @

^@

password → @password

Character Modifications

Action
Rule
Example

Uppercase first letter

c

password → Password

Uppercase all letters

u

password → PASSWORD

Lowercase all letters

l

PASSWORD → password

Capitalize every word

t

hello world → Hello World

Toggle case

T0, T1, etc.

T0password → Password T1password → pAssword

Inserts / Deletes

Action
Rule
Example

Insert 1 at position 0

i0 1

password → 1password

Insert 9 at position 3

i3 9

pas9sword

Delete first character

D0

password → assword

Delete last character

D$

password → passwor

Reversals / Duplications

Action
Rule
Example

Reverse word

r

password → drowssap

Duplicate word

d

password → passwordpassword

Reflect word (word+reverse)

f

pass → passssap

Length Adjustments

Action
Rule
Example

Truncate to length 6

]6

password → passwo

Keep only 6 characters from start

[6

password → passwo

Advanced Useful Rules

Action
Rule
Example

Append years (e.g., 2023, 2024)

$2$0$2$3 or $2$0$2$4

password2023

Prepend common numbers (e.g., 123)

^1^2^3

123password

Append ! after capitalizing first letter

c$!

Password!

Double append (e.g., !1)

$!$1

password!1

PreviousPassword CrackingNextCustom Password List

Last updated 22 days ago