This is a stupid script I wrote to generate 'realistic' passwords based on what I've seen when cracking passwords on real compromised domain controllers. Obviously this can vary based on numerous factors including password policy. This is going to be used in conjuction with my Person Generator script to populate users onto my test domain with somewhat realistic passwords.
Feel free to modify the integer ranges as you feel necessary. There is no statistical analysis behind these numbers. They literally came off the top of my head.
Again, this is a very basic script and I plan on improving it with additional features. Feel free to distribute or modify.
usage: pug.py [-h] [--hashes] [--ntlm] [--lm] [--count COUNT]
[--first FIRSTNAMEFILE] [--last LASTNAMEFILE]
[--wordlist WORDLISTFILE] [--cmd] [--cmd-domain]
optional arguments:
-h, --help show this help message and exit
--hashes output password hashes in pwdump format
--ntlm include NTLM password hashes
--lm include deprecated LM hashes
--count COUNT amount of items to generate
--first FIRSTNAMEFILE
file where first names are stored, default is data
/male-names.txt
--last LASTNAMEFILE file where last names are stored, default is data
/last-names.txt
--wordlist WORDLISTFILE
seed file for passwords to be generated from, default
is data/word.lst
--cmd output username and password in 'net user jsmith
password /add' format for use on Windows
--cmd-domain output username and password in 'net user jsmith
password /add /domain' format for use on Windows AD
Generate ten random usernames and passwords
$ python pug.py --count 10
[+] kalford Hammer44
[+] froberson Bonzo93
[+] dwolfe pickle38
[+] cwaters 7u5kp7
[+] scaldwell root
[+] lfernandez scotty4
[+] fmarsh 10f3H?aTxr
[+] sguerra charity86
[+] iroth sandi78
[+] patkins suzuki81
Generate ten random usernames and NTLM password hashes in John the Ripper format
$ python pug.py --count 10 --hashes --ntlm
bbowen:1603:AAD3B435B51404EEAAD3B435B51404EE:42D04D8049AE53DBE0BFB359BFF6257D:::
canthony:1890A4E9FABE42E1985B7035D18B529E0ED8:AAD3B435B51404EEAAD3B435B51404EE:::
amosley:1894859A3049DAD0D10D78EA986D4E3ED8CA:AAD3B435B51404EEAAD3B435B51404EE:::
zmosley:1351:AAD3B435B51404EEAAD3B435B51404EE:32ED87BDB5FDC5E9CBA88547376818D4:::
mdean:1532:AAD3B435B51404EEAAD3B435B51404EE:13A991DB38E764976B669C44E98922FD:::
gclemons:1007:AAD3B435B51404EEAAD3B435B51404EE:1FBA69803F6D7A8AEDDB25308EEB6676:::
nfleming:1156:AAD3B435B51404EEAAD3B435B51404EE:2C12E60C994F3112F2EBC256C1D132B1:::
jaustin:1599CE37CCA4F3B086EAC11627F33E17DBBD:AAD3B435B51404EEAAD3B435B51404EE:::
jyoung:1448:AAD3B435B51404EEAAD3B435B51404EE:8E9EA18044D0C59FF9B1484E2B612363:::
lkeller:1264:AAD3B435B51404EEAAD3B435B51404EE:BF6EF7A24C198A69B177CCA583DF8671:::
Generate ten random usernames and LM (Legacy Windows LanManager) password hashes in John the Ripper format
$ python pug.py --count 10 --hashes --lm
mquinn:1069:A30512FDA396A13D1BC0FF9C535C9968:C73B0D30ED8E9150CA29138C04F45D34:::
klowe:1655:EE6C0CEE1192C24FC2265B23734E0DAC:254269D2099C3EB4FB1D99F599890B51:::
ebullock:1153:801DFE004BE9E2B9FF17365FAF1FFE89:74F017B8E34FEFB6478A074EBA256264:::
anielsen:1394:C895EA6D3920068D9C5014AE4718A7EE:8970E2C3AACFC7E3D738C1BDF15AB152:::
xpugh:1899:87171EED555DC3C11F66994B4FC2476E:68C993814C2473E336AE6982AE8DF47A:::
dfrancis:1177:6FFB7E3402723D8EAAD3B435B51404EE:99EC5205A7494239039915A344FE86EA:::
denglish:1844:8DB52C8848E2E84C25AD3B83FA6627C7:2DC579DDCF5EA456A8B66BDA7FD01120:::
efitzpatrick:1694:234668513F8AFB89AAD3B435B51404EE:A787D5F7543F878C8F2C21F101CBBD85:::
mcook:1456:7935889242C3A90A36077A718CCDF409:1F6BE2EFEA57D3D5C393927CED8A4135:::
zoneal:1710:1BE94EECF7D8AC9509752A3293831D17:6DF751F35CCEE7B55EAE90AFF17E339E:::
Generate ten random usernames and passwords in a format to be added to a local Windows system with the command prompt
$ python pug.py --count 10 --cmd
net user wroberts hunter2 /add
net user gmcdonald h1gnpz5x1h /add
net user cstrong 51tiffany /add
net user aolson rocky61 /add
net user thicks vicki27 /add
net user shunter shunter1 /add
net user sparsons spartan61 /add
net user kbest lions47 /add
net user arivas jasmin89 /add
net user apickett greg43 /add
Generate ten random usernames and passwords in a format to be added to a Windows Active Directory domain with the command prompt
$ python pug.py --count 10 --cmd-domain
net user mcastro beaches44 /add /domain
net user eglenn stars73 /add /domain
net user bmcknight eeyore37 /add /domain
net user jchandler /add /domain
net user cwatts Bond00781 /add /domain
net user gholden westlife46 /add /domain
net user swong rc3r8thzcyj8 /add /domain
net user shyde 87start /add /domain
net user mmcbride password4 /add /domain
net user bfuentes secret /add /domain