WYD - Where Your Data
2 min readArticle
WYD (Where Your Data) is a wordlist generator that creates custom wordlists based on information you already know about a target. Unlike brute-force lists, WYD focuses on personal profiling — it takes your input keywords and applies the transformations real humans use when making passwords.
How It Works
Feed it a list of words (names, places, dates, pet names, company names) and it spits out realistic mutations. Think of it as simulating how your target would actually construct a password.
Installation
bash
# Usually available on Kali
apt install wyd
# Or clone from source
git clone https://github.com/nicowillis/wyd
Basic Usage
bash
# Generate wordlist from input keywords file
wyd.pl -b keywords.txt -o custom_wordlist.txt
# Apply leet speak transformations
wyd.pl -b keywords.txt -c leet -o output.txt
# Combine multiple sources
cat names.txt dates.txt company.txt > combined.txt
wyd.pl -b combined.txt -o final_list.txt
Input File Format
One word per line. Throw everything you know at it:
shell
adamjoron
password
Liverpool
fluffy
2024
1990
CompanyName
Transformations Generated
- Capitalization:
fluffy→Fluffy,FLUFFY - Leet speak:
password→p4ssw0rd,p@ssword - Number appending:
fluffy→fluffy1,fluffy123,fluffy2024 - Reversal:
fluffy→yffulf - Combinations:
fluffyliverpool,liverpool2024 - Common suffixes:
!,@,#,123,1234
Best Use Cases
- Targeted spear-phishing credential testing
- Post-OSINT password spraying against known accounts
- Supplement rockyou.txt with personalized mutations
- Internal red team assessments when you know the org's naming conventions
Workflow Example
bash
# 1. Do OSINT, gather keywords
# 2. Build input file
# 3. Generate with WYD
wyd.pl -b target_info.txt -o wyd_list.txt
# 4. Feed to Hydra or Hashcat
hydra -l admin -P wyd_list.txt ssh://192.168.1.1
See Also
- cewl-custom-wordlist-generator - scrape keywords directly from target website
- crunch-wordlist-generator - generate by character pattern/length
- rsmangler-wordlist-mangler - even more aggressive mangling
techzonesite.comUnlock Your IT Potential