CUPP vs John the Ripper
GitHub Stats
About CUPP
CUPP (Common User Passwords Profiler) is a tool that generates custom wordlists based on information gathered about a target individual. Rather than using generic wordlists, CUPP creates targeted password lists by taking inputs like the target's name, birthday, partner's name, pet's name, company, and other personal details, then generating thousands of password permutations using common patterns people use when creating passwords. It applies rules like capitalizing first letters, appending birth years, combining names with special characters, leetspeak substitutions, and other patterns observed in real-world password creation habits. CUPP also supports downloading and parsing existing leaked wordlists and can generate wordlists from OSINT data. The philosophy is simple: people are predictable, and targeted wordlists are far more effective than brute force against human-chosen passwords.
About John the Ripper
John the Ripper is a widely used password cracker designed to perform fast and efficient hashing attacks. Supporting hundreds of hash types and ciphers, it runs in both CPU and GPU modes to maximize performance across different platforms. Known for its versatility and speed, John the Ripper is a staple tool for security professionals conducting password audits and cryptographic research, offering comprehensive support for various attack vectors and techniques.
Platform Support
Tags
CUPP only
John the Ripper only