A versatile Rust tool for generating and mutating wordlists using patterns, web scraping, and password formats.
Gorilla is a Rust-based command-line tool designed for generating, extending, and mutating wordlists used in security testing and password cracking. It combines functionalities from tools like crunch, cupp, and CeWL into a single application, allowing users to create targeted wordlists from patterns, web content, and common password formats.
Security researchers, penetration testers, and red teamers who need to create custom wordlists for brute-force attacks, username enumeration, or password auditing.
Gorilla offers a unified, extensible platform with a powerful mutation engine, eliminating the need to switch between multiple tools and providing advanced features like conditional mutations and YAML-based rule sets.
tool for generating wordlists or extending an existing one using mutations.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Supports customizable patterns with character sets and numeric ranges, such as generating all 5-letter lowercase words with '{a-z}{a-z}{a-z}{a-z}{a-z}' as shown in the README.
Enables rule-based mutations via YAML files, allowing operations like appending, prepending, and conditional logic, exemplified in the simple.yml file with multiple mutation sets.
Extracts words from web pages by automatically stripping scripts and styles using the --from-website argument, building wordlists directly from site content.
Generates usernames or passwords from predefined templates and CSV input, demonstrated with the basic_usernames.yml set and support for processing multiple profiles via CSV.
The tool is in early development, leading to potential instability and incomplete features, with the README admitting that maintaining a full mutation list is 'painful' and users must refer to source code.
Currently only supports scraping single web pages, not full-site crawling, which restricts its utility for comprehensive content extraction compared to tools like CeWL.
Mutation details are not fully documented in the README; users must examine the src/mutation.rs file to discover all available actions, increasing the learning curve for complex rules.
Lacks a graphical user interface, which may be a barrier for users unfamiliar with command-line tools or those preferring visual workflows for wordlist management.
Gorilla is an open-source alternative to the following products:
cupp is a common user password profiler tool that generates possible password lists based on user information for security testing.
CeWL is a custom word list generator tool written in Ruby that spiders websites to create wordlists for password cracking and security testing purposes.
crunch is a wordlist generator for creating custom password lists and dictionaries for security testing and penetration testing.