Namebuster

Generates a list of possible common username permutations given a list of names, a url, or a file.

Install

Go: go install github.com/benbusby/namebuster@latest

Python (PyPI -- no longer maintained): pip install namebuster

Usage

Command Line

bb@archbtw:~$ namebuster                                            
                                                        
Usage:                                                  
namebuster <names|url|file>                             
                                                        
Example (names): namebuster "John Broccoli, Diana Mango"
Example (url):   namebuster https://sauna.htb           
Example (file):  namebuster document.txt

For each discovered name, namebuster will generate ~200 possible usernames. You can then use this list with a tool like kerbrute, for example (originally used for the Sauna machine on HackTheBox):

[ benbusby : ~/test ]
$ namebuster https://sauna.htb > usernames.txt
[ benbusby : ~/test ]
$ ./kerbrute_linux_amd64 userenum ./usernames.txt -d DOMAIN.LOCAL --dc sauna.htb

    __             __               __
   / /_____  _____/ /_  _______  __/ /____
  / //_/ _ \/ ___/ __ \/ ___/ / / / __/ _ \
 / ,< /  __/ /  / /_/ / /  / /_/ / /_/  __/
/_/|_|\___/_/  /_.___/_/   \__,_/\__/\___/

Version: v1.0.3 (9dad6e1) - 02/18/20 - Ronnie Flathers @ropnop

2020/02/18 23:47:59 >  Using KDC(s):
2020/02/18 23:47:59 >  	domain.com:88

2020/02/18 23:47:59 >  [+] VALID USERNAME:	 fsmith@DOMAIN.LOCAL
2020/02/18 23:47:59 >  Done! Tested 125 usernames (1 valid) in 1.585 seconds