Hi,
I’m just wondering where do you get your user lists, or combolists? There are tons of password wordlists online, but it seems like I’m struggling to find ones for users. A lot of tutorials for tools like THC Hydra, Metasploit, etc. shows user lists, but not where they got them from. Is there a “default” (or popular one) that everyone’s uses and that could get me started?
Thank you.
Try using google for github and seclists. It is a great collection of wordlists and parameters, including the usernames you seek.
I think metasploit wordlists is good. If you are using Kali / Parrot. You can download rockyou wordlist and darkc0de. I always choose unix_username and unix_password from metasploit wordlist.
Kali has wordlists at /usr/share/wordlists/
In Kali: install the seclists package. It include several lists with user names in it. Take a look at /usr/share/seclists/Usernames/