DefinitelyNotRockYou helps you test the strength of your own passwords. It uses details about a target to create a list of common password guesses. This tool works locally on your computer. You use it for security research and to check password strength.
Many people use personal information like birthdays, pet names, or hometowns in their passwords. These are easy for others to guess. This tool collects that data and creates a text file of likely password combinations. You can then use this file to test how well a password protects a zip folder against guesses.
The software includes a simple web interface. You open this in your web browser to enter details. It saves no data. Everything stays on your local machine.
This tool runs on computers with Windows 10 or Windows 11.
- Processor: Modern dual-core processor or better.
- Memory: 4 gigabytes of RAM.
- Storage: 100 megabytes of free space.
- Software: A modern web browser like Chrome, Firefox, or Edge.
Follow these steps to set up the software on your computer.
- Visit the project page here: https://github.com/corrieverminous789/DefinitelyNotRockYou.
- Look for the green "Code" button near the top right of the page.
- Click "Download ZIP" from the menu.
- Open your "Downloads" folder in Windows File Explorer.
- Right-click the downloaded folder and select "Extract All."
- Choose a location and click "Extract."
- Open the extracted folder. Find the file named "start.exe."
- Double-click "start.exe" to begin the program.
Windows might show a blue box at first to protect your computer. Click "More info" and then click the "Run anyway" button if this appears. The program opens a black window. Leave this window open while you work.
Once the program starts, follow these instructions to generate your lists.
- Open your favorite web browser.
- Type "localhost:5000" into the address bar and press Enter.
- The setup screen appears. Enter details like names, nicknames, and dates in the provided spaces.
- Click the "Generate" button.
- The software saves a file named "wordlist.txt" into the program folder.
You can use your new wordlist to test the strength of a password-protected zip file.
- Navigate to the "Zip Tester" tab in your browser.
- Click "Select File" to upload the zip file you want to test.
- Click "Browse" to select the "wordlist.txt" file you made earlier.
- Click "Start Test."
- The program checks the zip file against every word in your list.
- The screen shows the password if the tool finds a match.
- Use this tool only on systems you own or have permission to audit.
- Never share the wordlists you generate with other people.
- Delete any wordlists once you finish your security testing.
- Create strong, unique passwords that do not contain personal details.
- Use a password manager to keep your credentials safe.
If you encounter problems, check these items first.
- The application window closes immediately: Ensure you extracted the zip file before running the program. Running it directly from the zip container will cause errors.
- The browser cannot find the page: Wait fifteen seconds. The program takes a moment to load the web server. If it still fails, check that the black command window remains open.
- The program shows an error message: Verify that your computer has enough free memory. Close other programs if you run many at once.
- Antivirus software blocks the app: Some security software flags password tools as suspicious even if they are harmless. You may need to add an exception in your antivirus settings for the "DefinitelyNotRockYou" folder.
This software provides a platform for education and legitimate security hygiene. Understanding how easy it is to guess simple passwords helps you create better ones. Always act with honesty when testing systems. You are responsible for your own actions and how you use this tool.
Keywords: cupp, password, password-generator, password-safety, password-strength, passwords, wordlist, wordlist-attack, wordlist-generation, wordlist-generator, wordlist-maker, wordlist-technique, wordlistgenerator, wordlists