Skip to content

Astrosp/worlit

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

7 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Worlit — Personal Info Password Profiler

A security research tool that generates realistic password wordlists from personal information.
Audit password policies, test authentication systems, and demonstrate why personal-info passwords are weak.

🌐 Live Python CLI


What Is This?

Worlit is a CUPP-style (Common User Passwords Profiler) tool heavily optimized for security researchers, bug bounty hunters, and penetration testers. It takes a target's personal information — name, date of birth, mobile number, partner's name, area, child's name, etc. — and generates extremely precise, realistic password wordlists.

Most people create passwords from information they can remember: their name, birthday, pet's name, or a combination of these with simple patterns like John1995! or iloveJane. Worlit exploits this predictable behavior by leveraging a Tier-Based generation engine that prioritizes high-probability, real-world patterns before falling back to generic combinations.

Key Features

  • 🎯 Priority Mode Engine — Highly-tuned, data-driven templates (e.g., Name+Year, Name+@+Year, Name+123) are generated first. Guaranteed to produce the most realistic passwords at the top of the list.
  • 🔐 Expansive Fields — Input for 12+ variables including Child's Name, Area/PIN Code, Favorite Team/Band, and Lucky Numbers.
  • 🌐 Hacker-Themed Web App — Minimal, zero-radius cyber-cyan interface. Runs 100% client-side (no data leaves your browser), deployable to GitHub Pages.
  • 🐍 Python CLI — Command-line tool with interactive mode for terminal-based workflows (e.g., piping to Hashcat/John).
  • 📥 Export — Download generated wordlists as .txt files or copy to clipboard.
  • Fast & Cap-Aware — Aggressively deduplicated using Sets, generating exactly the count you need without combinatorial exhaustion.

Web App

The web app runs entirely in your browser — no data is ever sent to any server.

Usage

  1. Enter the target's personal information (name, DOB, mobile, etc.)
  2. Set the number of passwords and length range
  3. Click Generate Wordlist
  4. Copy the results or download as .txt

Python CLI

Requirements

  • Python 3.6+ (no external dependencies)

Interactive Mode

python password_generator.py

You'll be guided through entering target information step by step.

Command-Line Mode

# Basic usage
python password_generator.py --first John --last Doe --dob 15/06/1995 --count 500

# Full options
python password_generator.py \
  --first John \
  --last Doe \
  --nick johnny \
  --dob 15/06/1995 \
  --mobile 9876543210 \
  --partner Jane \
  --pet Buddy \
  --child Timmy \
  --company Google \
  --team Chelsea \
  --area Andheri \
  --pin 400001 \
  --username johndoe \
  --lucky 7,11 \
  --keywords "football,batman" \
  --count 200 \
  --min 8 \
  --max 16 \
  -o custom_wordlist.txt

CLI Options

Flag Description Default
-I, --interactive Run in interactive mode
--first First name
--last Last name
--nick Nickname
--dob Date of birth (DD/MM/YYYY)
--year Birth year
--mobile Mobile number
--partner Partner's name
--pet Pet's name
--child Child's name
--company Company or school
--team Favorite Team or Band
--area Street or Area Name
--pin PIN or ZIP code
--username Username or handle
--lucky Lucky numbers (comma-separated)
--keywords Comma-separated custom keywords
--count Number of passwords 200
--min Minimum password length 6
--max Maximum password length 20
-o, --output Output filename wordlist.txt

Generation Tiers & Strategies

Tier/Strategy Description Example
Tier 1 Explicit Priority Templates John1995, John99, John@1995, John_123
Tier 2 Generic Combinator (Sorted) John-1995, 1995@John, John2024
Tier 3 Bulk Generation john, JOHN, p@$$w0rd, Doe!@#
Strat 1 Case Mutations johnJOHN, John, johN, JohN, jOhN
Strat 2 Leet Speak passwordp@$$w0rd, p4ssw0rd, pa$$word
Strat 3 Date Fragmentation 15/06/19951506, 0615, 95, 150695, 1995
Strat 4 Mobile Chunks 98765432103210, 9876, 5432, 0123456789
Strat 5 Two-Name Combos JohnJane, JohnBuddy123
Strat 6 Prefix Patterns iloveJane, myBuddy, kingJohn, mrDoe
Strat 7 Keyboard Walks johnqwerty, asdfJohn, John1qaz
Strat 8 Reversals & Suffixes nhoJ, John123!, Doe!@#, john_doe

⚠️ Disclaimer

This tool is intended for authorized security testing, research, and educational purposes only. Unauthorized access to computer systems is illegal.

About

A powerful CUPP-style personal info password profiler for security researchers and bug bounty hunters.

Topics

Resources

Stars

0 stars

Watchers

0 watching

Forks

Contributors