I lost a password and want to try brute force. I have a vague idea of what the password was so I think it's worth a shot.

I need a word list generator, but not to generate words, to generate random strings (I don't know what that would be called).

I already have one that lets me specify maximum and minimum length and a list of characters that must be included (i.e. excluding all others). What I don't like about it is that it repeats characters too much, for example 11111112. I know I didn't use that so I need one that lets me put a limit on the repetition so as to reduce the number of entries.

Can someone please recommend something?

TIA.

Not a wordlist generator, but a wordlist with 14 million entries: https://www.scrapmaker.com/download/...es/rockyou.txt

Inspired by https://arstechnica.com/information-...sword-cracker/.
Also https://arstechnica.com/information-...our-passwords/.

A web search for "password brute force" will turn up a lot of resources.

Thanks, but that will not do. I need to find a random string (not any real words) with my own choice of allowed characters.

The second article is entitled
Perhaps it contains a few tips.

Depends on what your generator program is using for its RNG i.e /dev/urandom etc. For some ideas have you seen this link.

https://www.google.com/amp/s/www.how...mand-line/amp/

https://www.redhat.com/en/blog/under...itations-linux

Check out this if it will help: https://random-word-api.herokuapp.com/home

You can set the length of the word.

Or check out links below:

https://developer.oxforddictionaries.com/
https://developer.wordnik.com/

But what application you want to bruteforce? Is it Win Account Password? There's no need to brute force..

some more links:
https://github.com/first20hours/goog...00-english.txt
https://www.randomlists.com/random-words

LUKS/dm-crypt.

There is a crack some-where out there for LUKS, using (multiple ?) GPU. Maybe on github from memory - never tried it, but was an interesting project.

This may help https://passwordsgenerator.net/ . You can set all sorts of limits of type and num of chars.

Check out this link: https://access.redhat.com/solutions/1543373

From above link:

Is this a computer that you have administrative rights to? (What OS, BTW?)

If so (and it's Linux), why not just change it using the "root" account? Or boot from a rescue CD, mount the root filesystem, and fix it (if the account in question is the root account.)

If you don't have administrative rights, brute forcing entry into the system is going to raise some eyebrows (at the very least) or hackles (eventually) as there are undoubtedly logs of failed attempts and questions will inevitably be asked. Be aware that many systems apply administrative locks on accounts that have failed to successfully login after a given number of failed attempts in a row. (Note: accounts are also often "disusered" when the account has not been used in a given period of time, say, six months.) Then prostrating one's self before the Powers That Be will be necessary to get the password changed. Explaining 6 failures is easier than explaining 100,000.

It is my personal computer, the one I've used at home for many years.

It's not a root password. It's a LUKS/dm-crypt password.

I find that very confusing. If the master key is stored in the kernel, what happens when the system is updated? What if it's an external media? I have googled that and couldn't find an explanation.

Good question but I don't claim to be an expert, nor I design the Kernel. But I believe there should be a signature that is kept on the OS to determine the uniqueness of the encryption or the media device, maybe it's like the logic of a MAC address that is unique to every NIC and it's kept on the NIC ROM. Just my 2 cents.