[6ix]

cupp.py - Common User Passwords Profiler

Hello everyone,
So i recently found out about this simple Python script that generates a list of passwords based on info given about your victim. It's pretty neat and can come in handy, so I figured why not share it?

About the tool :

Spoiler:

The most common form of authentication is the combination of a username and a password or passphrase. If both match values stored within a locally stored table, the user is authenticated for a connection. Password strength is a measure of the difficulty involved in guessing or breaking the password through cryptographic techniques or library-based automated testing of alternate values.

A weak password might be very short or only use alphanumberic characters, making decryption simple. A weak password can also be one that is easily guessed by someone profiling the user, such as a birthday, nickname, address, name of a pet or relative, or a common word such as God, love, money or password.

That is why CUPP has born, and it can be used in situations like legal penetration tests or forensic crime investigations.

So what Is CUPP Exactly?

CUPP is a tool (python script)  that generates a wordlist specifically for a target.
It asks you questions about the target's  (name, birth day, mothers name, etc... ) and then generates a password based on the keywords you entered.

So for example, if your target's mother is called Lucy, and her birthday was on 12/01/1950, your target could have a password like : Lucy1201, or Lucy0112 etc..
Cup.py generates a LONG list of possible combinations with the information you provided about the target, that you can later use as a wordlist to try and login,bruteforce,...

Setting up and using the script

Requirements : Python 2.7.X.X installed [X] ( Tutorial if you haven't intsalled this yet )

Note : If you already have python 3.x Installed, just run cupp3.py insead of cupp.py in step 1!

So let's start off by donwloading the script :

direct download (.rar)
github page

So now that you've downloaded the script, it's pretty easy to use!
Just follow these next few easy steps to generate your own custom password list

1) Cd into the dir where the script is installed; and run the script using python.



2) You'll be greeted with the all the options.




3 )Now to generate your own password list, simply run the script with th -i argument , and fill in everything you know about your victim.

Spoiler:

4) Boom, an 19168 word long password list has been generated for you to use! Simple as that.




Thanks for reading!
6ix


EDIT : Changed the linked tutorial to one that shows how to download python 2.7.X

Also :
this is my first tutorial ever on this site, let me know how i did!