rapid7/metasploit-framework — pull request #3504 by ringt (2014-07-08 21:16:59+00:00)
Title: New module to build wordlist from active directory fields

I've usually done this through alternate methods but figured it was just as easy to build it in to cut down on switching back and forth between tools. The module will pull from a list of fields in Active Directory (note you can customize the list) and generate a wordlist in /tmp for use by JtR, oclHashcat, etc. In the case (like the active directory description field) where spaces are likely, it will split them up into separate words and combine as one long word (it does similar things for - (phone numbers)). I've had very good luck (sad) in the past using the words as a seed to cracking. My ruby foo has gotten very very rusty but hopefully it passes muster (it did pass msftidy).