Brute Force Attacks [Telnet logons]

[steveo1620 () yahoo com]

I'm currently in the midle of a security assessment / pen test for a client of mine.

They have a fairly solid perimeter except that they have telnet enabled on their pix515. (I know it is out of 
production and support)

I'm looking for a tool or good password list that I can run on the login prompt.

I have Hydra and Brutus which both suppot telnet protocols BUT, the testing is only as good as the list.

So, if anyone knows of a tools that creates combinations from a list or if anyone knows of an extensive list it would 
be greatly appreciated.

Cheers...