Home

⚡ CredForge Wiki

Welcome to the CredForge wiki. CredForge generates breach-realistic synthetic credentials — email:password combos, PII dumps, and password-only wordlists for authorized red team operations.

Quick Start

pip install credforge
credforge -n 5000 -f 1 -c br -o brazil_creds.txt

Or from source:

git clone https://github.com/Adam-ZS/credforge
cd credforge
python3 credforge.py -n 5000 -f 1 -c br -o brazil_creds.txt

What makes CredForge realistic

1. Breach-weighted passwords — the actual top real-world passwords (123456, password, qwerty, letmein, dragon...) dominate the tail, exactly like real breach distributions. 20 weighted generation patterns on top: bases+year, leetspeak, seasons, keyboard runs, name+digits, random.
2. Per-country email domains — weighted by real registration stats: gmail-heavy in US/IN, mail.ru in RU, bol.com.br in BR, web.de in DE, yahoo.co.jp in JP.
3. Age-weighted birth years — 1975–1995 heavy, matching where the largest account populations sit.

Pages

• CLI Reference
• Use Cases
• Password Model
• FAQ

Format Overview

Mode	Output
1	email:password
2	username:password
3	email:password:fullname
4	email:password:fullname:phone:address:ssn
5	Full PII + SSN + Luhn-valid CC
6	password only — wordlist mode

All credentials are synthetic. No data is sourced from actual breaches. For authorized testing only.