CUPP — Common User Passwords Profiler

CUPP generates targeted password wordlists from personal information (birthdays, pet names, family members, hobbies). It is most effective during brute-force or password-spraying attacks when you have OSINT on a specific individual. ¹

Installation

# Kali Linux
sudo apt install cupp
 
# From source
git clone https://github.com/Mebus/cupp.git
cd cupp
python3 cupp.py

Usage

# Interactive mode — asks questions about the target
cupp -i
 
# Download pre-built wordlists by language
cupp -l
 
# Download default password lists (router/AP credentials)
cupp -a

Interactive mode prompts

• First name, last name, nickname
• Birthdate
• Partner’s name and birthdate
• Child’s name and birthdate
• Pet’s name
• Company name
• Keywords (hobbies, favorite teams, etc.)
• Leetspeak / special character mutations

CUPP combines these inputs with common patterns (dates, years, symbols) to produce a highly targeted list.

Sources

• CUPP - Common User Passwords Profiler
• Kali Linux Tools: cupp — dead link

Related: cewl-custom-wordlist-generator, john-the-ripper, linux-reconnaissance-commands, h8mail, hydra

Footnotes

1. CUPP - Common User Passwords Profiler ↩