Sinisterly
Tutorial Ceating a custom password list for your target w/ cup.py - Printable Version

+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Hacking Tools (https://sinister.ly/Forum-Hacking-Tools)
+--- Thread: Tutorial Ceating a custom password list for your target w/ cup.py (/Thread-Tutorial-Ceating-a-custom-password-list-for-your-target-w-cup-py)

Pages: 1 2

Ceating a custom password list for your target w/ cup.py - 6ix - 10-19-2016

cupp.py - Common User Passwords Profiler

Hello everyone,
So i recently found out about this simple Python script that generates a list of passwords based on info given about your victim. It's pretty neat and can come in handy, so I figured why not share it?

About the tool :

Spoiler:
The most common form of authentication is the combination of a username and a password or passphrase. If both match values stored within a locally stored table, the user is authenticated for a connection. Password strength is a measure of the difficulty involved in guessing or breaking the password through cryptographic techniques or library-based automated testing of alternate values.

A weak password might be very short or only use alphanumberic characters, making decryption simple. A weak password can also be one that is easily guessed by someone profiling the user, such as a birthday, nickname, address, name of a pet or relative, or a common word such as God, love, money or password.

That is why CUPP has born, and it can be used in situations like legal penetration tests or forensic crime investigations.

So what Is CUPP Exactly?

CUPP is a tool (python script)  that generates a wordlist specifically for a target.
It asks you questions about the target's  (name, birth day, mothers name, etc... ) and then generates a password based on the keywords you entered.

So for example, if your target's mother is called Lucy, and her birthday was on 12/01/1950, your target could have a password like : Lucy1201, or Lucy0112 etc..
Cup.py generates a LONG list of possible combinations with the information you provided about the target, that you can later use as a wordlist to try and login,bruteforce,...

Setting up and using the script

Requirements : Python 2.7.X.X installed [X] ( Tutorial if you haven't intsalled this yet )

Note : If you already have python 3.x Installed, just run cupp3.py insead of cupp.py in step 1!

So let's start off by donwloading the script :

direct download (.rar)
github page

So now that you've downloaded the script, it's pretty easy to use!
Just follow these next few easy steps to generate your own custom password list

1) Cd into the dir where the script is installed; and run the script using python.

[Image: jdudez.png]

2) You'll be greeted with the all the options.

[Image: kxhsls.png]


3 )Now to generate your own password list, simply run the script with th -i argument , and fill in everything you know about your victim.

Spoiler:
[Image: mfvntl.png]

4) Boom, an 19168 word long password list has been generated for you to use! Simple as that.

[Image: rgezkl.png]


Thanks for reading!
6ix


EDIT : Changed the linked tutorial to one that shows how to download python 2.7.X

Also :
this is my first tutorial ever on this site, let me know how i did!

RE: Ceating a custom password list for your target w/ cup.py - Bish0pQ - 10-19-2016

Nice tutorial, nice formatted. Noob-proof and easy to follow. Thank you for the share.

John the ripper is also a nice tool for creating password lists.

RE: Ceating a custom password list for your target w/ cup.py - 6ix - 10-19-2016

(10-19-2016, 03:21 PM)Bish0pQ Wrote: Nice tutorial, nice formatted. Noob-proof and easy to follow. Thank you for the share.

John the ripper is also a nice tool for creating password lists.

Thanks for the feedback! Appreciate it

RE: Ceating a custom password list for your target w/ cup.py - mothered - 10-20-2016

(10-19-2016, 03:21 PM)Bish0pQ Wrote: John the ripper is also a nice tool for creating password lists.

Agree.

I'll also add that "Crunch" Is excellent for creating comprehensive password/wordlists. @"6ix", I've used Cupp.py via BackTrack a while ago and vouch that It certainly does the job well.

RE: Ceating a custom password list for your target w/ cup.py - swatterhat - 10-23-2016

This is nice. It should come in handy with Sentry

RE: Ceating a custom password list for your target w/ cup.py - mothered - 10-23-2016

(10-23-2016, 01:03 AM)swatterhat Wrote: This is nice. It should come in handy with Sentry

You've gotta love Sentry.

Probably still one of the most widely-used tools nowadays.

RE: Ceating a custom password list for your target w/ cup.py - swatterhat - 10-23-2016

This is so convenient to use. If only I can make it work. There maybe an issue with the codes. Not a Python expert here. Can u help?

C:\Users\---\Desktop\cupp-master>python cupp.py
 File "cupp.py", line 99
   print "[+] Saving dictionary to \033[1;31m"+filename+"\033[1;m, counting \03
3[1;31m"+str(lines)+" words.\033[1;m"
                                             ^
SyntaxError: invalid syntax

RE: Ceating a custom password list for your target w/ cup.py - 6ix - 10-23-2016

(10-23-2016, 12:25 PM)swatterhat Wrote: This is so convenient to use. If only I can make it work. There maybe an issue with the codes. Not a Python expert here. Can u help?

C:\Users\---\Desktop\cupp-master>python cupp.py
 File "cupp.py", line 99
   print "[+] Saving dictionary to \033[1;31m"+filename+"\033[1;m, counting \03
3[1;31m"+str(lines)+" words.\033[1;m"
                                             ^
SyntaxError: invalid syntax

That's weird.
What version of python are u using? - > You can check this by typing "Python" in your Command Prompt , the first line will tell you what version you're on.

RE: Ceating a custom password list for your target w/ cup.py - swatterhat - 10-23-2016

THis is the latest I got from the website.

Python 3.5.2 (v3.5.2:4def2a2901a5, Jun 25 2016, 22:01:18) [MSC v.1900 32 bit (In
tel)] on win32
Type "help", "copyright", "credits" or "license" for more information.

RE: Ceating a custom password list for your target w/ cup.py - 6ix - 10-23-2016

(10-23-2016, 01:55 PM)swatterhat Wrote: THis is the latest I got from the website.

Python 3.5.2 (v3.5.2:4def2a2901a5, Jun 25 2016, 22:01:18) [MSC v.1900 32 bit (In
tel)] on win32
Type "help", "copyright", "credits" or "license" for more information.

Since you have python 3 installed, you should run cupp3.py instead of cupp.py, as that is the version ported for python 3.x
My bad because i didn't mention this in the turorial, and also linked a guide to installing python 3.
I've never tested this scirpt on python 3.x; so let me know if it works!