A security research tool that generates realistic password wordlists from personal information.
Audit password policies, test authentication systems, and demonstrate why personal-info passwords are weak.
Worlit is a CUPP-style (Common User Passwords Profiler) tool heavily optimized for security researchers, bug bounty hunters, and penetration testers. It takes a target's personal information — name, date of birth, mobile number, partner's name, area, child's name, etc. — and generates extremely precise, realistic password wordlists.
Most people create passwords from information they can remember: their name, birthday, pet's name, or a combination of these with simple patterns like John1995! or iloveJane. Worlit exploits this predictable behavior by leveraging a Tier-Based generation engine that prioritizes high-probability, real-world patterns before falling back to generic combinations.
- 🎯 Priority Mode Engine — Highly-tuned, data-driven templates (e.g.,
Name+Year,Name+@+Year,Name+123) are generated first. Guaranteed to produce the most realistic passwords at the top of the list. - 🔐 Expansive Fields — Input for 12+ variables including Child's Name, Area/PIN Code, Favorite Team/Band, and Lucky Numbers.
- 🌐 Hacker-Themed Web App — Minimal, zero-radius cyber-cyan interface. Runs 100% client-side (no data leaves your browser), deployable to GitHub Pages.
- 🐍 Python CLI — Command-line tool with interactive mode for terminal-based workflows (e.g., piping to Hashcat/John).
- 📥 Export — Download generated wordlists as
.txtfiles or copy to clipboard. - ⚡ Fast & Cap-Aware — Aggressively deduplicated using Sets, generating exactly the
countyou need without combinatorial exhaustion.
The web app runs entirely in your browser — no data is ever sent to any server.
- Enter the target's personal information (name, DOB, mobile, etc.)
- Set the number of passwords and length range
- Click Generate Wordlist
- Copy the results or download as
.txt
- Python 3.6+ (no external dependencies)
python password_generator.pyYou'll be guided through entering target information step by step.
# Basic usage
python password_generator.py --first John --last Doe --dob 15/06/1995 --count 500
# Full options
python password_generator.py \
--first John \
--last Doe \
--nick johnny \
--dob 15/06/1995 \
--mobile 9876543210 \
--partner Jane \
--pet Buddy \
--child Timmy \
--company Google \
--team Chelsea \
--area Andheri \
--pin 400001 \
--username johndoe \
--lucky 7,11 \
--keywords "football,batman" \
--count 200 \
--min 8 \
--max 16 \
-o custom_wordlist.txt| Flag | Description | Default |
|---|---|---|
-I, --interactive |
Run in interactive mode | — |
--first |
First name | — |
--last |
Last name | — |
--nick |
Nickname | — |
--dob |
Date of birth (DD/MM/YYYY) | — |
--year |
Birth year | — |
--mobile |
Mobile number | — |
--partner |
Partner's name | — |
--pet |
Pet's name | — |
--child |
Child's name | — |
--company |
Company or school | — |
--team |
Favorite Team or Band | — |
--area |
Street or Area Name | — |
--pin |
PIN or ZIP code | — |
--username |
Username or handle | — |
--lucky |
Lucky numbers (comma-separated) | — |
--keywords |
Comma-separated custom keywords | — |
--count |
Number of passwords | 200 |
--min |
Minimum password length | 6 |
--max |
Maximum password length | 20 |
-o, --output |
Output filename | wordlist.txt |
| Tier/Strategy | Description | Example |
|---|---|---|
| Tier 1 | Explicit Priority Templates | John1995, John99, John@1995, John_123 |
| Tier 2 | Generic Combinator (Sorted) | John-1995, 1995@John, John2024 |
| Tier 3 | Bulk Generation | john, JOHN, p@$$w0rd, Doe!@# |
| Strat 1 | Case Mutations | john → JOHN, John, johN, JohN, jOhN |
| Strat 2 | Leet Speak | password → p@$$w0rd, p4ssw0rd, pa$$word |
| Strat 3 | Date Fragmentation | 15/06/1995 → 1506, 0615, 95, 150695, 1995 |
| Strat 4 | Mobile Chunks | 9876543210 → 3210, 9876, 5432, 0123456789 |
| Strat 5 | Two-Name Combos | JohnJane, JohnBuddy123 |
| Strat 6 | Prefix Patterns | iloveJane, myBuddy, kingJohn, mrDoe |
| Strat 7 | Keyboard Walks | johnqwerty, asdfJohn, John1qaz |
| Strat 8 | Reversals & Suffixes | nhoJ, John123!, Doe!@#, john_doe |
This tool is intended for authorized security testing, research, and educational purposes only. Unauthorized access to computer systems is illegal.