Cyrillic --> English transliterated passwords wordlist

[dizcza]

Hello, hashcat community.
I live in Ukraine and I'm faced with the problem that many WPA passwords in my country are transliterated from Cyrillic to English. I cannot find leaked transliterated Cyrillic passwords to use as a wordlist in hashcat.
If you have such a wordlist or a link, please, share.
Note: this problem is not about UTF-8 hashes. The passwords are still ASCII, they're just made from Russian / Ukrainian words.
Less common case is Russian words, typed in English keyboard ("лопата" -> "kjgfnf", etc.)

[undeath]

the table lookup attack from hashcat-legacy can do that, assuming you create a corresponding lookup table: https://hashcat.net/wiki/doku.php?id=tab...kup_attack

[rico]

Take a look at the leetspeak.rule file in hashcat's /rules folder. It specifies rules for substituting one character for another, e.g.:

sa4
sa@

One rule to substitute (s) character 'a' -> '4' and another rule for 'a' -> '@'

A form of transliteration! I'd suggest that you make your own transliterate.rule file like so (using your own example):

Code:

sлk
sоj
sпg
sаf
sтn

etc.

Then run hashcat in -a 0 mode with a Ukranian wordlist and your new -r transliterate.rule.

[undeath]

A form of transliteration! I'd suggest that you make your own transliterate.rule file like so (using your own example)

note this can get pretty messy with mulitibyte encodings. same for the table lookup attack in hashcat legacy iirc.

[RealEnder]

Check the dicts here:
http://wpa-sec.stanev.org/?dicts
More specifically Wikipedia ru and wp_chit bg
Those are suitable for WPA cracking and are created with wlc - very simple python tool, that supports transcoding:
http://sec.stanev.org/?download

[royce]

RealEnder, wlc was new to me - thanks for the tip, looks very useful.

[dizcza]

Although wlc is indeed a useful tool, it produces unrealistic passwords, at least the ones I found in Wikipedia.ru dict. For example, in Russian "I speak" you say differently from "you speak" and "they speak" because of the verb suffix. As a result, wlc produces a lot of trash alongside with the true candidates.
That's why I'm interested in leaked passwords.

[epixoip]

this can get pretty messy with mulitibyte encodings. same for the table lookup attack in hashcat legacy iirc.

Wide character support was added to the table attack engine in hashcat-legacy for this exact purpose: https://hashcat.net/forum/thread-1506.html