Mebus/cupp
Cupp
CUPP is a suite of tools for extracting default credentials from aggregated databases, generating password dictionaries from personal data, profiling targets interactively, and expanding wordlists from dictionary sources. It functions as a password dictionary generator and target profiling tool that collects personal details through interactive questions to build custom password lists for security testing.
The project distinguishes itself through a modular command pipeline architecture that chains independent subcommands for downloading remote wordlists, parsing structured credential databases, generating profile-driven password lists, and applying rule-based mutations to expand dictionaries. It includes a rule-based password mutation engine that applies deterministic transformation rules to base dictionaries, appending variations like case changes, digit suffixes, and special character substitutions. The interactive profile-driven wordlist generator guides users through a structured questionnaire to collect personal attributes, then algorithmically combines them into candidate passwords.
The tool also provides a remote wordlist repository fetcher for downloading pre-compiled password dictionaries via HTTP with local caching, a template-based personal data expansion system that uses predefined templates to expand personal details into combinatorial password lists, and an Alecto database credential parser that extracts default username-password pairs from aggregated security research sources.
Features
- Default Credential Databases - Parses default credentials from the Alecto database for security assessments.
- Credential Extraction Utilities - Parses default usernames and passwords from the Alecto database for security testing.
- Interactive Profile Generators - Walks through interactive questions about a target to build a custom password list.
- Targeted Profile Generators - Profiles a person's known details to produce a custom password list for security testing.
- Profile-Driven Generators - Generates custom password wordlists from personal data and dictionary sources.
- Target Profilers - Collects personal details through interactive questions to build targeted password lists.
- Personal Profile Wordlists - Builds custom password lists from personal details about a specific target.
- Profile-Driven Wordlists - Builds custom wordlists from personal details about a target for password cracking.
- Wordlist Generators - Generates custom password wordlists from interactive personal profiling.
- Password - Applies transformation rules to wordlists to generate common password variations.
- Wordlist Appenders - Appends new candidate passwords from a dictionary source to existing wordlists.
- Wordlist Expanders - Appends new candidate passwords from a dictionary source to existing wordlists.
- Password Dictionary Distributions - Fetches large, ready-to-use password dictionaries from a remote repository.
- Password Profile Templates - Expands personal details like name and birthdate into combinatorial password lists.
- Wordlist Repository Fetchers - Downloads pre-compiled password dictionaries via HTTP with local caching.
- Dictionary Expanders - Expands existing password lists by appending new candidates from a dictionary source.
- Remote Wordlist Downloads - Fetches large, ready-to-use password dictionaries from a remote repository.
- CLI Pipeline Dispatchers - Chains expand, profile, download, and parse subcommands into a pipeline.
- Wordlist Generation Tools - Generates wordlists based on user profiling data.
- Social Engineering Tools - Generates wordlists based on personal information.
- Wordlists and Enumeration - Common user password profiler for generating targeted wordlists.
Star history
How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
