Creating a Custom Worldlist for Brute Force

Ismail Tasdelen
DataBulls
Published in
3 min readNov 20, 2022

--

Photo by R.D. Smith on Unsplash

It is a word (password) list created with many word and password combinations in wordlists. It is used in the Brute Force attack, which is also mentioned in this article, which is used to log into the target system or a user’s private system. Some versions may consist of millions of words (passwords).

After this article, you will be able to create a personalized Worldist, that is, a Worldlist created by using what we know about the target without the need for long Worldists for the password of the person, in Brute Force attacks.

We will be using the CUPP tool to create this worlist.

What is the CUPP tool?

This program creates a Worldlist using known information against the target system or person. Thus, considering that most people today use publicly known personal information in their passwords, the probability of finding the target’s password in Brute Force attacks increases significantly.

How to install CUPP tool?

First you download our tool “git clone” command;

git clone https://github.com/Mebus/cupp.git

Try the steps as below to run the tool.

cd cupp

python3 cupp.py

You can use the following step to use the tool. It will ask you a few questions and will create a password list according to these questions.

python3 cupp.py -i

In this article, I have only explained the CUPP tool. But you can find many alternative tools on github.

As a bonus for this article, I would like to tell you about an online tool. The name of this tool is WeakPass, this tool can create a password list according to some password rule set.

Url : https://weakpass.com/generate

If you want to create password creation rules yourself, you can refer to the site below and use it.

Now let’s create a list of passwords if you want.

As you can see, it created 216 passwords according to password rules.

Thank you for taking the time to read this article. See you in my next post, take care.

For more interesting articles

--

--

Ismail Tasdelen
DataBulls

I'm Ismail Tasdelen. I have been working in the cyber security industry for +7 years. Don't forget to follow and applaud to support my content.