Penetration Testing: Re: word lists

[Jim Duncan <jnduncan () cisco com>]

> Does anyone know where word lists containing commands can be found?
> [...]
> I'm also looking for a file that contains commands (such as the IOS ones)
> that are not words by themselves, but can be concatenations of words, with
> or without hyphens and other typical shell/Cisco/whatever commands.
>
> Probably this is more for curiosity than for actual penetration of the above
> device, however I thought others would be interested as well in such a list.
> Years ago, there used to be many word lists at
> ftp.cso.uiuc.edu/pub/security/wordlists/ but the site is no longer up.
Many word lists can be found at http://www.cerias.purdue.edu in the FTP
archive.  Unfortunately, I don't think it has an exact list like you
want, and I don't have a list of IOS commands to send you.  It's 
certainly an interesting idea, though.

        Jim




==
Jim Duncan, Product Security Incident Manager, Cisco Systems, Inc.
<http://www.cisco.com/warp/public/707/sec_incident_response.shtml>
E-mail: <jnduncan () cisco com>  Phone(Direct/FAX): +1 919 392 6209