Mentalist
MIT๐ Password Attacks ยท Python
Mentalist is a graphical tool for custom wordlist generation. It uses a chain-based approach where you define a sequence of transformations: start with base words (from files, keyboard walks, or manual input), then apply processors like case manipulation, substitution (leetspeak), appending/prepending characters, and combining multiple word sources. The visual interface shows you exactly how words transform through each chain link, making it easy to build complex generation rules without memorizing hashcat or John the Ripper rule syntax. Mentalist can output generated wordlists directly as plaintext files, or export the generation rules in hashcat or John the Ripper format for use during cracking sessions. This makes it particularly useful for creating targeted wordlists for engagements where you have some knowledge of the target's password patterns or organizational password policies.
Installation
pip
$ pip install mentalistfrom source
$ git clone https://github.com/sc0tfree/mentalist && cd mentalist && pip install .Use Cases
- Building complex wordlist generation rules with a visual chain-based interface
- Exporting generation rules in hashcat or John the Ripper format
- Creating targeted wordlists based on known password policy requirements
- Combining multiple word sources with transformations for comprehensive lists
- Teaching password cracking concepts with visual rule building
Tags
Details
- Category
- ๐ Password Attacks
- Language
- Python
- Repository
- sc0tfree/mentalist
- License
- MIT
- Platforms
- ๐งlinux๐macos๐ชwindows
Links
Alternatives & Comparisons
John the Ripper
CFast password cracker. Supports hundreds of hash types and ciphers. CPU and GPU modes.
Compare Mentalist vs John the RipperHashcat
CWorld's fastest password recovery tool. GPU-accelerated with support for 300+ hash types.
Compare Mentalist vs HashcatMore in Password Attacks
John the Ripper
CFast password cracker. Supports hundreds of hash types and ciphers. CPU and GPU modes.
Hashcat
CWorld's fastest password recovery tool. GPU-accelerated with support for 300+ hash types.
THC Hydra
CFast online password brute-forcer. Supports 50+ protocols including SSH, FTP, HTTP, SMB, MySQL.
Medusa
CSpeedy, parallel, modular brute-forcer. Supports HTTP, MySQL, SMB, SSH, Telnet, and more.
CeWL
RubyCustom wordlist generator. Spiders a target site and builds password lists from scraped words.
SecLists
ShellThe security tester's companion. Huge collection of wordlists - usernames, passwords, URLs, fuzzing payloads, shells.