Techzone/WYD - Where Your Data

WYD - Where Your Data

2 min readArticle

WYD (Where Your Data) is a wordlist generator that creates custom wordlists based on information you already know about a target. Unlike brute-force lists, WYD focuses on personal profiling — it takes your input keywords and applies the transformations real humans use when making passwords.

How It Works

Feed it a list of words (names, places, dates, pet names, company names) and it spits out realistic mutations. Think of it as simulating how your target would actually construct a password.

Installation

bash
# Usually available on Kali
apt install wyd

# Or clone from source
git clone https://github.com/nicowillis/wyd

Basic Usage

bash
# Generate wordlist from input keywords file
wyd.pl -b keywords.txt -o custom_wordlist.txt

# Apply leet speak transformations
wyd.pl -b keywords.txt -c leet -o output.txt

# Combine multiple sources
cat names.txt dates.txt company.txt > combined.txt
wyd.pl -b combined.txt -o final_list.txt

Input File Format

One word per line. Throw everything you know at it:

shell
adamjoron
password
Liverpool
fluffy
2024
1990
CompanyName

Transformations Generated

  • Capitalization: fluffyFluffy, FLUFFY
  • Leet speak: passwordp4ssw0rd, p@ssword
  • Number appending: fluffyfluffy1, fluffy123, fluffy2024
  • Reversal: fluffyyffulf
  • Combinations: fluffyliverpool, liverpool2024
  • Common suffixes: !, @, #, 123, 1234

Best Use Cases

  • Targeted spear-phishing credential testing
  • Post-OSINT password spraying against known accounts
  • Supplement rockyou.txt with personalized mutations
  • Internal red team assessments when you know the org's naming conventions

Workflow Example

bash
# 1. Do OSINT, gather keywords
# 2. Build input file
# 3. Generate with WYD
wyd.pl -b target_info.txt -o wyd_list.txt
# 4. Feed to Hydra or Hashcat
hydra -l admin -P wyd_list.txt ssh://192.168.1.1

See Also

  • cewl-custom-wordlist-generator - scrape keywords directly from target website
  • crunch-wordlist-generator - generate by character pattern/length
  • rsmangler-wordlist-mangler - even more aggressive mangling
techzonesite.comUnlock Your IT Potential