Mebus / cupp

CUPP - Common User Passwords Profiler

CUPP - 通用用户密码分析器

About 关于

The most common form of authentication is the combination of a username and a password or passphrase. If both match values stored within a locally stored table, the user is authenticated for a connection. Password strength is a measure of the difficulty involved in guessing or breaking the password through cryptographic techniques or library-based automated testing of alternate values. 最常见的身份验证形式是用户名与密码或口令的组合。如果两者都与本地存储表中的值匹配，则用户通过连接验证。密码强度是衡量通过加密技术或基于库的替代值自动测试来猜测或破解密码难度的指标。

A weak password might be very short or only use alphanumeric characters, making decryption simple. A weak password can also be one that is easily guessed by someone profiling the user, such as a birthday, nickname, address, name of a pet or relative, or a common word such as God, love, money or password. That is why CUPP was born, and it can be used in situations like legal penetration tests or forensic crime investigations. 弱密码可能非常短，或者仅使用字母数字字符，这使得解密变得简单。弱密码也可能是容易被分析用户的人猜到的密码，例如生日、昵称、地址、宠物或亲戚的名字，或者像 God、love、money 或 password 这样的常用词。这就是 CUPP 诞生的原因，它可用于合法渗透测试或犯罪取证调查等场景。

Requirements 需求

You need Python 3 to run CUPP. 你需要 Python 3 来运行 CUPP。

Quick start 快速开始

$ python3 cupp.py -h $ python3 cupp.py -h

Options 选项

Usage: cupp.py [OPTIONS] 用法：cupp.py [选项]

-h this menu -h 此菜单

-i Interactive questions for user password profiling -i 用于用户密码分析的交互式问答

-w Use this option to profile existing dictionary, or WyD.pl output to make some pwnsauce :) -w 使用此选项分析现有字典或 WyD.pl 输出，以生成一些“pwnsauce”（密码字典）:)

-l Download huge wordlists from repository -l 从存储库下载大型词表

-a Parse default usernames and passwords directly from Alecto DB. Project Alecto uses purified databases of Phenoelit and CIRT which where merged and enhanced. -a 直接从 Alecto 数据库解析默认用户名和密码。Alecto 项目使用了 Phenoelit 和 CIRT 的净化数据库，并进行了合并和增强。

-v Version of the program -v 程序版本

Configuration 配置

CUPP has configuration file cupp.cfg with instructions. Example (Fast forwarded) CUPP 拥有包含说明的配置文件 cupp.cfg。示例（快进）

License 许可证

This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or any later version. 本程序是自由软件；您可以根据自由软件基金会发布的 GNU 通用公共许可证条款对其进行重新分发和/或修改；无论是许可证的第 3 版，还是（由您选择的）任何后续版本。

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. 本程序的分发是希望它有用，但没有任何担保；甚至不包含对适销性或特定用途适用性的暗示担保。有关更多详细信息，请参阅 GNU 通用公共许可证。

You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA See ’./LICENSE’ for more information. 您应该已经随本程序收到了一份 GNU 通用公共许可证的副本；如果没有，请写信给自由软件基金会，地址：59 Temple Place, Suite 330, Boston, MA 02111-1307 USA。更多信息请参阅 ’./LICENSE’。

Github import Github 导入

This project was imported into https://github.com/Mebus/cupp by Mebus from: http://www.remote-exploit.org/content/cupp-3.0.tar.gz http://www.remote-exploit.org/articles/misc_research__amp_code/index.html to encourage further development of the tool. 该项目由 Mebus 从 http://www.remote-exploit.org/content/cupp-3.0.tar.gz 和 http://www.remote-exploit.org/articles/misc_research__amp_code/index.html 导入到 https://github.com/Mebus/cupp，旨在鼓励该工具的进一步开发。

Original author 原始作者

Muris Kurgas aka j0rgan j0rgan@remote-exploit.org http://www.remote-exploit.org http://www.azuzi.me Muris Kurgas 又名 j0rgan j0rgan@remote-exploit.org http://www.remote-exploit.org http://www.azuzi.me

Contributors 贡献者

Bosko Petrovic aka bolexxx bole_loser@hotmail.com http://www.offensive-security.com http://www.bolexxx.net Bosko Petrovic 又名 bolexxx bole_loser@hotmail.com http://www.offensive-security.com http://www.bolexxx.net

Mebus https://github.com/Mebus/ Mebus https://github.com/Mebus/

Abhro https://github.com/Abhro/ Abhro https://github.com/Abhro/

Andrea Giacomo https://github.com/codepr Andrea Giacomo https://github.com/codepr

quantumcore https://github.com/quantumcore quantumcore https://github.com/quantumcore