PASSPRO is a smart password profiling tool that generates highly accurate and targeted wordlists for:
- 🌍 Country-based RDP/SSH attacks (Brazil, India, China, USA, Russia, Turkey, Iran, etc.)
- 👤 Personal brute-force attacks using full personal data (name, phone, address, pet, hobbies, family, etc.)
| Feature | Description |
|---|---|
| Country Profiling | Generates regional wordlists based on local admin names, cities, ISPs, sports teams, surnames, and cultural patterns |
| Personal Profiling | Uses all available personal info (name, birthdate, phone, city, pet name, favorite color, partner/child names) |
| Smart Mutations | Leetspeak, reverse strings, keyboard layout shifts, date/year variations, and common suffixes |
| Multi-Protocol | Separate optimized lists for Windows RDP and Linux SSH |
| Optimized Size | Each wordlist contains between 1,200 to 3,200 highly lethal, noise-free entries |
| Batch Processing | Process multiple employees/personas from JSON or CSV files |
| Web UI | Lightweight local web dashboard (no extra dependencies) |
| CLI Wizard | Step-by-step interactive terminal with Persian/English support |
Input: Country Name + Protocol (RDP/SSH)
The engine combines:
- Default/Common Administrator accounts
- Regional city names (
Sao Paulo,Mumbai,Beijing,Moscow) - Local surnames (
Silva,Sharma,Wang,Ivanov) - Popular sports teams (
Flamengo,CSK,Bayern,Persepolis) - Major ISPs and telecoms (
Claro,Jio,China Telecom,Turkcell) - Common regional words and patterns (
Senha,Kumar,Yonetici,Modir)
Input: Personal Data (First Name, Last Name, Birth Year, Phone, City, Pet Name, Favorite Color, Partner/Child Name, Company, etc.)
The engine generates targeted wordlists by combining:
- Name + Surname + Year
- Reversed names and phone numbers
- Leetspeak variations (
A→4,E→3,S→5) - Keyboard layout mistakes (Persian QWERTY mapping)
- Common suffixes (
123,!,@,#,2024,2025) - Variations with partner/child/pet names
PASSPRO/
├── password_profiler/
│ ├── models.py # Data models
│ ├── persian_engine.py # Persian keyboard mapping & date conversions
│ ├── mutator.py # Leetspeak, permutations, mutations
│ ├── profiler_core.py # Core password generation engine
│ ├── cli.py # Interactive CLI
│ ├── batch_runner.py # Batch processing from JSON/CSV
│ └── web_server.py # Local web UI
├── web/
│ ├── index.html # Modern, Persian-friendly web interface
│ ├── style.css # Glassmorphism, dark mode
│ └── app.js # Web logic
├── examples/
│ ├── sample_employee.json
│ └── sample_output.txt
├── tests/
│ └── test_profiler.py
├── main.py # Main entry point
└── README.md # This file
git clone https://github.com/thecynetx/PASSPRO.git
cd PASSPROpip install -r requirements.txtpython main.py| Country | Code | RDP | SSH |
|---|---|---|---|
| Brazil | BR | ✅ | ✅ |
| India | IN | ✅ | ✅ |
| China | CN | ✅ | ✅ |
| USA | US | ✅ | ✅ |
| Russia | RU | ✅ | ✅ |
| Turkey | TR | ✅ | ✅ |
| Iran | IR | ✅ | ✅ |
| Germany | DE | ✅ | ✅ |
| France | FR | ✅ | ✅ |
| UAE | AE | ✅ | ✅ |
Administrador@123
Administrador2024
Senha@123
Suporte@123
Brasil@123
SaoPaulo@2024
Flamengo@123
Claro@123
Lucas@123
Silva@123
AmirHosseini1990
Amir@1990
Amir!2024
Hosseini@123
AmirHosseini@2024
Amir.1990
Amir_Hosseini
AmirTehran
AmirLeo
AmirLove
- For Red Teams: Simulate real-world credential attacks
- For Security Researchers: Analyze password patterns and policies
- For Penetration Testers: Increase success rates in targeted attacks
- For Blue Teams: Generate ban-lists to block predictable passwords
This tool is designed exclusively for legitimate security testing, research, and educational purposes. Any unauthorized or illegal use is strictly prohibited. The authors assume no responsibility for misuse.
We welcome contributions for:
- Adding new countries
- Improving mutation algorithms
- Enhancing the Web UI
- Adding more data sources
- Telegram : https://t.me/cynetx
- YouTube : https://www.youtube.com/@cynetxir
- GitHub: https://github.com/yourusername
Star ⭐ this repository if you find it useful!
Made with ❤️ by the CYNET Security Team