A graphical tool for custom wordlist generation using human password paradigms, with output for Hashcat and John the Ripper.
Mentalist is a graphical tool for generating custom wordlists used in password security testing and authorized system audits. It models how humans commonly construct passwords—using patterns like leet speak, appending numbers, or mixing case—to create targeted dictionaries. The tool outputs both raw wordlists and rule files compatible with Hashcat and John the Ripper for efficient password cracking.
Security professionals, penetration testers, and ethical hackers conducting authorized password audits or red team exercises. It's also suitable for researchers studying password security and human factors in authentication.
Developers choose Mentalist for its intuitive graphical interface that simplifies complex wordlist generation, its focus on real-world human password behaviors, and its direct integration with industry-standard tools like Hashcat and John the Ripper without requiring deep scripting knowledge.
Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Tkinter-based GUI with a node-based workflow simplifies complex rule chaining and visualization, making it accessible without deep scripting knowledge, as shown in the demo GIF.
Focuses on real-world human patterns like leet speak and number appending, enabling targeted dictionaries based on actual password habits for more effective security testing.
Directly outputs rule files compatible with Hashcat and John the Ripper, streamlining password cracking workflows without manual conversion, as highlighted in the multi-format output feature.
Supports importing custom lists and includes built-in categories like slang, allowing flexibility in tailoring wordlists to specific targets or policies.
Requires Python 3.11+ and tkinter, with non-trivial installation steps on macOS and Linux (e.g., separate brew commands for python-tk), hindering quick setup.
Lacks a CLI option, making it unsuitable for automation, batch processing, or integration into scripted security tools without GUI access.
Admits limitations in the README, such as no de-duplication, limited language dictionaries, and absent site scraping, which are deferred to future work.