Pick your knows!
Inspired by and based on Mebus' CUPP
ALPHA RELEASED 27 May 2017
This means all associates are treated equally, and BEWGor only queries basic information about them
Clone it or download the zip file. Run it with Python 2 - NOT Python 3
python BEWGor.py #runs normally
python BEWGor.py -help #presents a help screen that admittedly doesn’t say much
python BEWGor.py -input #also runs normally
At its core, BEWGor is designed help with ensuring password security. It is a Python script that prompts the user for biographical data about a person (called the Subject), which is then used to create likely passwords for that Subject.
All information is manually inputted and stored locally. No information is sent to any other location, or pulled from the web.
If you want to improve your password security, run BEWGor on yourself!
To see an example, check out the Sample-Output File - 1.6 Million Lines
When it comes to generating passwords, humanity, on average, has not demonstrated too much creativity. The most common password is 123456 and the 2nd most common is password. My first project, Probable-Wordlists explores this in depth. It contains billions of the world’s most common passwords - in order of how common they are.
If a person doesn’t use a single-word password straight out of a dictionary, they are likely to use words from their personal lives. These words are easy to remember and not screamingly obvious to others - and for many, those are good enough reasons to use them as passwords…
Does your password sound like the answer to a security question?
Passwords often include information like:
- Mother’s Maiden Name
- Name of a Childhood Pet
- Birthdays of the password holder or a loved one
- The password holder’s nationality
Due to Social Media use and the strength of modern day Open-Source Intelligence (OSINT), this information is NOT HARD TO COME BY. Therefore, including it in your password is NOT SECURE.
BEWGor asks for information about a person, and those they associate with, and generates potential passwords based on that data.
Did your subject have a dog named Spot? Was your subject born in 1980?
BEWGor will come up with many variations of these two pieces of information:
spot1980, 1980spot, SPOT80, 80Spot and more.
BEWGor takes the simplest features of CUPP and does a very deep dive. It prompts the user for a lot more specific information, but not have all of CUPP's capabilities.
- Vastly Increased Information Detail on Main Subject
- Includes Support for an arbitrary number of family members and pets
- By using permutations to generate possible passwords, BEWGor can generate huge numbers of passwords
- Create Upper/Lower/Reverse variations of inputted values
- Save raw inputted values to a Terms file before variations are generated
- Set upper and lower limits on output line length
- Check that an inputted Birthday is valid (not in the future, a false leap day, June 32nd, etc.)
- Allow the User to download Wordlists from within CUPP
- Create ‘l33t’ variations of given lines
- Allow the user to add special characters at the end of words without entering them specifically
- Limit the number of outputs to the most likely formats, such as Name+birthyear
- I’ve got you covered on wordlists - check out my other project Probable-Wordlists
- ’l33t’ variations might be included in a future release, but for now, using a program like HashCat will allow you to create 133t-style and other variations of a BEWGOr wordlist as-needed
- HashCat can do this as well with the ‘rule’ function
- BEWGor is not subtle, it will generate ALL the combinations - including plenty of unlikely ones.
- This may be slimmed down in the future, but why not err on the side of having all the possibilities?
- Heavy Handed! Big files, intensive (produces a lot of unlikely variations)
- Doesn’t handle non-ASCII well
- Doesn’t handle names that include spaces well, such as von Braun
- Biased towards monogamous behavior. Doesn’t ask about past significant others, or multiple current significant others
- Treats Pets the same way it treats Children, Siblings and Significant others
- Doesn’t include user-defined associates (mentor, protogé, any relationship I didn’t think of yet.)
- Has mixed feelings about the word ‘of’
In Alpha release, associates are limited to: 1 Significant other, and an arbitrary number of Children, Parents, Siblings and Pets.
- Full Name
- Maiden Name
- Nicknames/Usernames
- Birthday (day and month)
- Birth Year
- From this information, it can generate initials, Greek/Chinese Zodiac Sign and Birthstone (Western and Hindu Style)
- Everything in All Subjects
- Gender Identity
- Nationality
- National Demonym (Such as Briton, or British)
- National Day
- Ethnicity
- Birthplace
- Hometown
- Full Dates (input the day they founded their company, anniversary, etc.)
- Days
- Years
- Words
- Numbers
- Range of Years (if you don’t know subject’s exact age)
- National Motto, Monarch’s Name
- Local Demonym (Londoner, Parisian, Texan)
- Addresses, Phone Numbers, contact information
- Career
- Academic History
- Favorite things
- Clubs and other associations
- and more...
- S/O - Meeting place, anniversary, wedding location...
- Pets - breed, age, multiple pets…
This file can be edited outside of the script but can be fed into BEWGor directly, no prompting.
- Minimum Data Prompts (Don’t ask for optional prompts, one entry per prompt)
- Maximum Data Prompts (Assume all prompts and variations included)
- Maybe more
See the Contributing.md file for guidelines
- BEWGor is for LAWFUL, ETHICAL AND EDUCATIONAL PURPOSES ONLY.
- The files contained in this repository are released "as is" without warranty, support, or guarantee of effectiveness.
- However, I am open to hearing about any issues found within these files and will be actively maintaining this repository for the foreseeable future. If you find anything noteworthy, let me know and I'll see what I can do about it.
BEWGor uses the GNU GPL v3 License. Terms can be found in the license file
or by clicking the GNU GPL v3 button above this line.