Mebus

    Mebus/cupp

    Common User Passwords Profiler (CUPP)

    backend
    dictionary-attack
    password
    password-strength
    weak-passwords
    wordlist
    Python
    GPL-3.0
    6.6K stars
    2.4K forks
    6.6K GitHub watchers
    Updated Oct 26, 2026
    View on GitHub

    Build with Backblaze B2

    SDKs, agent skills, IDE extensions, and reference pipelines from Backblaze Labs. All open source.

    Explore Backblaze Labs

    Loading star history...

    Where it stands

    Rank, growth pace and release cadence relative to everything GStars tracks.

    The project lists 14 contributors on GitHub.

    Gained 75% fewer stars in the last 90 days than in the 90 days before.

    Use Cases & Benefits

    • Generates personalized password wordlists by profiling user information to aid in password cracking and security testing.
    • Enables creation of targeted password dictionaries based on user-specific data, improving efficiency over generic wordlists.
    • Use for legal penetration testing to simulate realistic password attacks tailored to target users.
    • Use for forensic investigations to reconstruct potential passwords from known user details.
    • Use for security auditing to evaluate password strength and identify weak or guessable credentials.

    Should you depend on it?

    License terms, project hygiene and risks, from GitHub metadata and GStars' snapshots.

    License

    GPL 3.0

    Copyleft: distributing software that includes it generally requires releasing your source under the same license.

    Community files

    • README: present

    Watch-outs

    • GPL-style copyleft: including it in distributed software generally requires releasing your source under the same license.
    • No GitHub releases; pin a commit or tag instead of a release.

    General guidance from repository metadata, not legal advice. How we score

    From the README

    The most common form of authentication is the combination of a username and a password or passphrase. If both match values stored within a locally stored table, the user is authenticated for a connection. Password strength is a measure of the difficulty involved in guessing or breaking the password through cryptographic techniques or library-based automated testing of alternate values.

    A weak password might be very short or only use alphanumberic characters, making decryption simple. A weak password can also be one that is easily guessed by someone profiling the user, such as a birthday, nickname, address, name of a pet or relative, or a common word such as God, love, money or password.

    That is why CUPP was born, and it can be used in situations like legal penetration tests or forensic crime investigations.

    You need Python 3 to run CUPP.

    Excerpt from the Mebus/cupp README on GitHub (GPL-3.0 license). © its authors.Read the full README on GitHub

    Daily snapshots

    Stars gained per day, and how forks and open issues moved, from GStars' daily snapshots

    Jul 30: +0

    +134 stars over 90 days across 8 snapshot days.

    Forks

    2.4K+125

    Open issues

    53+4

    Compared with peers in Backend

    Fastest-growing repositories GStars tracks in this cohort for the week of Nov 1, by 7-day star growth

    Mebus/cupp compared with Backend repositories by stars, 7-day star growth, health score and last release
    RepositoryStars+7dHealthLast release
    anthropics/skills187.8K+2.9K15—
    DuarteSantos8/openGym19.7K+2.4K602 days ago
    shiyu-coder/Kronos47.0K+2.3K16—
    NationalSecurityAgency/ghidra98.2K+2.3K6414 days ago
    microsoft/VibeVoice56.0K+1.1K29—
    Mebus/cupp6.6K—13—
    Category median56.0K+2.3K29—

    Discover Repositories

    Search across tracked repositories by name or description