CUPP vs Mentalist
GitHub Stats
About CUPP
CUPP (Common User Passwords Profiler) is a tool that generates custom wordlists based on information gathered about a target individual. Rather than using generic wordlists, CUPP creates targeted password lists by taking inputs like the target's name, birthday, partner's name, pet's name, company, and other personal details, then generating thousands of password permutations using common patterns people use when creating passwords. It applies rules like capitalizing first letters, appending birth years, combining names with special characters, leetspeak substitutions, and other patterns observed in real-world password creation habits. CUPP also supports downloading and parsing existing leaked wordlists and can generate wordlists from OSINT data. The philosophy is simple: people are predictable, and targeted wordlists are far more effective than brute force against human-chosen passwords.
About Mentalist
Mentalist is a graphical tool for custom wordlist generation. It uses a chain-based approach where you define a sequence of transformations: start with base words (from files, keyboard walks, or manual input), then apply processors like case manipulation, substitution (leetspeak), appending/prepending characters, and combining multiple word sources. The visual interface shows you exactly how words transform through each chain link, making it easy to build complex generation rules without memorizing hashcat or John the Ripper rule syntax. Mentalist can output generated wordlists directly as plaintext files, or export the generation rules in hashcat or John the Ripper format for use during cracking sessions. This makes it particularly useful for creating targeted wordlists for engagements where you have some knowledge of the target's password patterns or organizational password policies.
Platform Support
Tags
Shared
CUPP only
Mentalist only