Password Maker

A high-performance, customizable, cross-platform and modern C ++ password dictionary generator

GitHub issues GitHub pull requests GitHub tag (latest SemVer) PoweredBy PoweredBy

BlueWingTan is pleased to support the cyber security open source community by making Password Maker available.

Copyright (C) 2020 BlueWingTan. All rights reserved.

Table of Contents

Introduction

Password Maker is a password dictionary generator written in modern C++，It was inspired by passmaker. Mainly used for information security practitioners to conduct internal audits and RED TEAMs for penetration testing.

In cryptanalysis and computer security, a dictionary attack is a form of brute force attack technique for defeating a cipher or authentication mechanism by trying to determine its decryption key or passphrase by trying hundreds or sometimes millions of likely possibilities, such as words in a dictionary. More information about password dictionary can be obtained at

Changes

The latest version is v0.0.4.

For other changes please refer to change log.

Compatibility

Password Maker can be compiled across platforms, and the following platforms/compilers are expected to complete the compilation:

The tested platform is Windows 10 (64-bit)/MSVC 16.5.

Compile

Password Maker compile with Cmake (requires version 3.14 and above), no other dependencies.

On Linux you can use make to compile, on Windows you can use ninja to compile.

After the default compilation is complete, the generated binary files will be stored in the ./Bin directory, and the metadata folder and related files will be copied together.

This program is currently not accompanied by related tests and will be added in subsequent versions.

File Organization

The files before compilation are organized as follows:

The output directory file after compilation is organized as follows:

Basic Usage

Parameter configuration

Configuration file

The default parameter configuration (./config/config.json) is as follows:

{
    "config": {
        "generate_seed": {
            "file_seed": {
                "chinese_last_name": "chinese_last_name_top100.txt",
                "common_english_name": "english_name.txt",
                "common_number": "common_number.txt",
                "keyboard_walk": "4_keyboard_walk.txt",
                "year_4": "4_years.txt",
                "year_2": "2_years.txt",
                "english_name_with_chinese_last_name": "english_name_with_chinese_last_name.txt"
            },
            "domain": [ "baidu.com", "badidu" ],
            "special_letter": [ "~", "`", "!", "@", "#", "$", "%", "^", "&", "*", "(", ")", "-", "_", "=", "+" ],
            "year": [ "2018", "2019", "2020" ]
        },
        "generate_rule": {
            "formation": {
                "content": [ "keyboard_walk year chinese_last_name" ],
                "keep_in_order": true
            },
            "capitalize": false,
            "transform": {
                "active": false,
                "rules": {
                    "a": "4",
                    "e": "3",
                    "g": "9",
                    "i": "1",
                    "o": "0",
                    "s": "5",
                    "t": "7",
                    "z": "2"
                }
            }
        },
        "generate_filter": {
            "minimum_length": 6,
            "optional": {
                "number": true,
                "lower_letter": true,
                "upper_letter": true,
                "special_letter": true
            },
            "achieve_optional": 2
        },
        "generate_additional": [ "weak_pass_chinese.txt", "weak_pass_top100.txt", "weak_pass_keyboard_walk.txt" ]
    }
}

Field description

generate_seed Seed configuration

Generate a password dictionary based on the following seeds

generate_rule Generate rule configuration

Generate a password dictionary according to the following rules:

generate_rule Filter rule configuration

Filter password dictionaries that do not meet the requirements according to the following rules：

generate_additional Additional dictionary configuration

Attach other password dictionaries according to the following rules:

array The additional password dictionary name needs to be stored in the ./dist directory

Run the program

After the configuration is complete, simply run the program. The input parameter frame is reserved in the code and can be expanded.

The generated dictionary is stored in the .\generated directory in the format yyyy-mm-dd-HH-mm-ss.txt.

Error handling

A more detailed log output is performed in the code, and if an error occurs, it can be processed according to the output content.

Contributing

Password Maker welcomes contributions. When contributing, please follow the code below.

Issues

Feel free to submit issues and enhancement requests.

Workflow

In general, we follow the “fork-and-pull” Git workflow.

  1. Fork the repo on GitHub
  2. Clone the project to your own machine
  3. Checkout a new branch on your fork, start developing on the branch
  4. Test the change before commit, Make sure the changes pass all the tests, please add test case for each new feature or bug-fix if needed.
  5. Commit changes to your own branch
  6. Push your work back up to your fork
  7. Submit a Pull request so that we can review your changes

NOTE: Be sure to merge the latest from “upstream” before making a pull request!

You can copy and paste the license summary from below.

BlueWingTan is pleased to support the cyber security open source community by making Password Maker available.
  
Copyright (C) 2020 BlueWingTan. All rights reserved.
  
Licensed under the MIT License (the "License"); you may not use this file except
in compliance with the License. You may obtain a copy of the License at
  
http://opensource.org/licenses/MIT
  
Unless required by applicable law or agreed to in writing, software distributed 
under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR 
CONDITIONS OF ANY KIND, either express or implied. See the License for the 
specific language governing permissions and limitations under the License.