Skip to content

README.md

Latest commit

 

History

History
92 lines (68 loc) · 3.16 KB

README.md

File metadata and controls

92 lines (68 loc) · 3.16 KB

README.md

wordsmith - Password Generator & Validation Tool

A powerful password wordlist generator with email/phone validation and "Have I Been Pwned?" integration.

⚠️ Disclaimer

This project is strictly for educational and research purposes only.

What This Tool Does NOT Do:

  • ❌ Does NOT attempt unauthorized access to any system
  • ❌ Does NOT perform hacking or illegal activities
  • ❌ Does NOT scrape, crawl, or abuse third-party services
  • ❌ Does NOT store, sell, or misuse personal data
  • ❌ Does NOT validate credentials against live systems
  • ❌ Third-party API responses (like HIBP) may contain stale or inaccurate data

What This Tool DOES Do:

  • ✅ Generates password combinations based on personal information (for authorized penetration testing)
  • ✅ Validates email format and phone number format locally
  • ✅ Queries the public "Have I Been Pwned?" database (read-only, no authentication bypass)
  • ✅ Helps security researchers understand password patterns

Legal Requirements:

  • You must have explicit written authorization before using this tool on any system or data you do not own
  • Using this tool for unauthorized access, hacking, or illegal purposes is a criminal offense
  • The authors are not responsible for misuse, damages, or legal consequences
  • Comply with all local, state, and federal laws

IMPORTANT:

This tool is provided "AS IS" without any warranty. Users are solely responsible for ensuring compliance with applicable laws and regulations. Unauthorized access to computer systems is illegal.

Features

Option 1: Password Generation

  • Generate thousands of password combinations from personal data
  • Uses transformations: leet speak, alternating caps, vowel removal
  • Supports separators and numeric patterns
  • Deduplication for unique passwords only

Option 2: Email Generation

  • Random email generation with custom domain
  • Keyword-based email prefixes

Option 3: Phone Number Generation

  • Support for Greece (+30) and Turkey (+90)
  • Random generation within valid ranges

Option 4: Validation & HIBP Checking

Sub-options:

  1. Email Format Validation — Local regex validation only
  2. Phone Number Validation — Uses phonenumbers library
  3. Single Email HIBP Check — Check if email was in known breaches
  4. Batch Email HIBP Checking — Check multiple emails from file

Important Notes on HIBP:

  • Queries the public "Have I Been Pwned?" API (with rate limiting)
  • Does NOT attempt to bypass, hack, or login to HIBP
  • Information is publicly available and read-only
  • Respects API TOS with 2-second delays between requests

Installation

pip install -r requirements.txt

Usage

python main.py

Follow the interactive menu to choose your option.

Requirements

See requirements.txt:

  • requests >= 2.31.0
  • phonenumbers >= 8.13.0
  • tqdm >= 4.66.0
  • pystyle >= 2.2.4

Authors

  • CodebindPyth

License

Educational Use Only - See Disclaimer

Remember: This tool is for authorized security testing and education only. Always obtain proper authorization before testing any systems you do not own.