Introduction to Cupp
Cupp stands for Common User Passwords Profiler and this tool can be used in many circumstances like license penetration tests or forensic crime investigations CUPP is a cross-platform and written in Python and its functioning is simple but with very powerful results.
This application is a social engineers best friend when it comes to creating targeted password dictionaries which are tailored to an individual.
How Cupp Works
Cupp takes vectors from the profiling done for an individual such as their nickname pets name childs birthdate etc.
It works on the principle that a password is more often a combination of things known to an individual.
These known things are often personal details that are very close to a persons heart.
In cases when a person might use special notations in place of alphabets e.g: leet can be written as 133t Cupp has you covered.
Installation and Configuration
Cupp can be downloaded from GitHub using the git clone command.
Within the downloaded Cupp folder run the cup.py file.
Once the file is run the program shows you the various options it has to offer.
git clone
cd cupp
ls
.cupp.py
Generating Custom Dictionary
Now its time to have some fun!
We will be using the interactive option to generate the custom dictionary.
You will see that we have the option to input options such as pets name childs name partners nickname etc.
All these things are highly personal and very common to find these things in a password one way or another.
Theres also an option to add any specific keywords special characters and random numbers.
Apart from all this theres the option to activate Leet mode this will make the generated dictionary extremely effective.
Thats all the dictionary now gets made and saved.
.cupp.py -i
.cupp.py -i
git clone
cd cupp
ls
.cupp.py
Optional Arguments:
-i Interactive questions for user password profiling
-w FILENAME Use this option to profile an existing dictionary
-l Download huge wordlists from a repository
-a Parse default usernames and passwords directly from Alecto DB.
Project Alecto uses purified databases of Phenoelit and CIRT which merged and enhanced.
-v Version of the program
Downloading Dictionaries from Cupp Repository
Cupp has its own repositories of dictionaries which are pre-classified.
These dictionaries can be downloaded and used.
The downloaded files are compressed and have to be uncompressed to be viewed.
Enter the number to choose a name to select the dictionary you want to download we have pressed 16 and downloaded to view a dictionary of Hindi names.
.cupp.py l
cd dictionaries
cd hindi
gzip -d hindu-names.gz
cat hindu-names
.cupp.py l
cd dictionaries
cd hindi
gzip -d hindu-names.gz
cat hindu-names
Источник: rutube.ru