crunch

Generate custom wordlists by pattern.

KaliParrotLinuxpassive

pkg: crunch

crunch creates wordlists from a character set and length/pattern spec — useful for targeted brute forcing.

Syntax

crunch {min} {max} [charset] [-t pattern]

Example

crunch 8 8 -t Pass@@@@ -o list.txt

Generates 8-char candidates matching "Pass" + 4 variable chars into list.txt.

Options & flags

What each switch does. Toggle them in the builder below to assemble a command.

(min) <8>Minimum length.
(max) <8>Maximum length.
(charset) <abc123>Characters to use.
-t <Pass@@@@>Pattern (@=lower, ,=upper, %=num, ^=sym).
-o <list.txt>Output file.

Command builder

Tick options (and fill any values) to build a ready-to-copy command.

crunch

Usage examples

crunch 8 8 -t Pass@@@@ -o list.txt

Generate "Pass" + 4 lowercase chars.

crunch 4 6 0123456789 -o pins.txt

All 4-6 digit numeric strings.

Advantages
  • Precise pattern control
  • Handles huge keyspaces
  • No network activity
Disadvantages
  • Lists can be enormous on disk
  • Naïve patterns waste time
  • Generation only
Tags
#wordlist#generation

Official docs: crunch

Related commands

Frequently asked questions

What is crunch used for?
crunch creates wordlists from a character set and length/pattern spec — useful for targeted brute forcing.
What is an example crunch command?
A common example is: crunch 8 8 -t Pass@@@@ -o list.txt — Generates 8-char candidates matching "Pass" + 4 variable chars into list.txt.
Is crunch part of Kali Linux?
Yes. crunch ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install crunch.
What category of security tool is crunch?
crunch is a Password Attacks tool with a passive-risk profile when run against a live target.

Try recon tools live

Run real scans against a domain you control, stage by stage.

Open the lab →