passpls will create an extensive list of passwords, based on specified modifiers, that can be used for password spraying. This tool is not meant to be an all encompassing password generator. It is simply made to quickly spit out some of the most popular passwords to test.
Note: Modifier "w" ensures the password meets AD password complexity, which means the password has to have at least three of the following (excluding unicode):
- Lowercase
- Uppercase
- Special character
- Number
$ ./passpls.py -h
usage: passpls.py [-h] [-i INPUT] [-o OUTPUT] [-m x [x ...]] [-d x [x ...]]
Passwords Please! - A companion for generating passwords for password spraying. (https://github.com/e-nzym3/passpls)
optional arguments:
-h, --help show this help message and exit
-i INPUT, --input INPUT
(Optional) File containing a list of passwords to be modified. If not specified, will generate a default list using months (-d m), common passwords (-d c), and seasons (-d s).
-o OUTPUT, --output OUTPUT
(Optional) File to which the modified passwords will be written. If not specified, will write to '[local directory]/modified_passwords.txt'.
-m x [x ...], --modifiers x [x ...]
(Optional) Modifiers to be used while processing the input file. (Defaults to 't l y r'.)
Example: '-m t y w'
* Available modifiers are:
t (title),
l (lowercase),
u (uppercase),
y (years),
r (common trailers),
w (Windows/AD Compliant).
-d x [x ...], --defaults x [x ...]
(Optional) Use pre-defined default/common passwords during processing.
Example: '-d s m c'
* Available lists for these include:
s (seasons),
d (days of the week),
c (common/default passwords),
e (extended common/default passwords),
m (months of the year).
-l #, --length # (Optional) Minimum passowrd length.
input_list.txt:
Github
lakers
DISNEY
Command:
./passpls -i input_list.txt -o output_list.txt -m t y r w -d s
Output:
$ cat output_list.txt
Autumn!
Autumn#
Autumn$
Autumn.
Autumn123
Autumn123!
Autumn123#
Autumn123$
Autumn1234
Autumn2022
Autumn2022!
Autumn2022#
Autumn2022$
Autumn2022@
Autumn2023
Autumn2023!
Autumn2023#
Autumn2023$
Autumn2023@
Autumn22
Autumn23
Autumn?
Autumn@
Disney!
Disney#
Disney$
Disney.
Disney123
Disney123!
Disney123#
Disney123$
Disney1234
Disney2022
Disney2022!
Disney2022#
Disney2022$
Disney2022@
Disney2023
Disney2023!
Disney2023#
Disney2023$
Disney2023@
Disney22
Disney23
Disney?
Disney@
Github!
Github#
Github$
Github.
Github123
Github123!
Github123#
Github123$
Github1234
Github2022
Github2022!
Github2022#
Github2022$
Github2022@
Github2023
Github2023!
Github2023#
Github2023$
Github2023@
Github22
Github23
Github?
Github@
Lakers!
Lakers#
Lakers$
Lakers.
Lakers123
Lakers123!
Lakers123#
Lakers123$
Lakers1234
Lakers2022
Lakers2022!
Lakers2022#
Lakers2022$
Lakers2022@
Lakers2023
Lakers2023!
Lakers2023#
Lakers2023$
Lakers2023@
Lakers22
Lakers23
Lakers?
Lakers@
Spring!
Spring#
Spring$
Spring.
Spring123
Spring123!
Spring123#
Spring123$
Spring1234
Spring2022
Spring2022!
Spring2022#
Spring2022$
Spring2022@
Spring2023
Spring2023!
Spring2023#
Spring2023$
Spring2023@
Spring22
Spring23
Spring?
Spring@
Summer!
Summer#
Summer$
Summer.
Summer123
Summer123!
Summer123#
Summer123$
Summer1234
Summer2022
Summer2022!
Summer2022#
Summer2022$
Summer2022@
Summer2023
Summer2023!
Summer2023#
Summer2023$
Summer2023@
Summer22
Summer23
Summer?
Summer@
Winter!
Winter#
Winter$
Winter.
Winter123
Winter123!
Winter123#
Winter123$
Winter1234
Winter2022
Winter2022!
Winter2022#
Winter2022$
Winter2022@
Winter2023
Winter2023!
Winter2023#
Winter2023$
Winter2023@
Winter22
Winter23
Winter?
Winter@
autumn123!
autumn123#
autumn123$
autumn2022!
autumn2022#
autumn2022$
autumn2022@
autumn2023!
autumn2023#
autumn2023$
autumn2023@
lakers123!
lakers123#
lakers123$
lakers2022!
lakers2022#
lakers2022$
lakers2022@
lakers2023!
lakers2023#
lakers2023$
lakers2023@
spring123!
spring123#
spring123$
spring2022!
spring2022#
spring2022$
spring2022@
spring2023!
spring2023#
spring2023$
spring2023@
summer123!
summer123#
summer123$
summer2022!
summer2022#
summer2022$
summer2022@
summer2023!
summer2023#
summer2023$
summer2023@
winter123!
winter123#
winter123$
winter2022!
winter2022#
winter2022$
winter2022@
winter2023!
winter2023#
winter2023$
winter2023@