EN
ENNA

CUPP

GPL-3.0

๐Ÿ”‘ Password Attacks ยท Python

CUPP (Common User Passwords Profiler) is a tool that generates custom wordlists based on information gathered about a target individual. Rather than using generic wordlists, CUPP creates targeted password lists by taking inputs like the target's name, birthday, partner's name, pet's name, company, and other personal details, then generating thousands of password permutations using common patterns people use when creating passwords. It applies rules like capitalizing first letters, appending birth years, combining names with special characters, leetspeak substitutions, and other patterns observed in real-world password creation habits. CUPP also supports downloading and parsing existing leaked wordlists and can generate wordlists from OSINT data. The philosophy is simple: people are predictable, and targeted wordlists are far more effective than brute force against human-chosen passwords.

5.9kstars
2.0kforks
48issues
Updated 3mo ago

Installation

from source

$ git clone https://github.com/Mebus/cupp.git && cd cupp && python3 cupp.py -h

Use Cases

  • Generating targeted wordlists from OSINT about specific individuals
  • Creating password lists based on personal information for penetration testing
  • Testing organizational password policies against profiled attack wordlists
  • Combining with hashcat or John the Ripper for targeted credential attacks
  • Demonstrating password predictability in security awareness training

Tags

wordlist-generatorprofilingtargeted-attacksocial-engineeringpassword-patternsdictionary-attackpasswordpassword-strengthweak-passwordswordlist

Details

Category
๐Ÿ”‘ Password Attacks
Language
Python
Repository
Mebus/cupp
License
GPL-3.0
Platforms
๐Ÿงlinux๐ŸŽmacos๐ŸชŸwindows

More in Password Attacks