wordlistxpl-forge 1.0.0__tar.gz

wordlistxpl_forge-1.0.0/CODE_OF_CONDUCT.md

@@ -0,0 +1,79 @@
+# Contributor Covenant Code of Conduct
+
+## Our pledge
+
+We as members, contributors, and leaders pledge to make participation in our
+community a harassment-free experience for everyone, regardless of age, body
+size, visible or invisible disability, ethnicity, sex characteristics, gender
+identity and expression, level of experience, education, socio-economic status,
+nationality, personal appearance, race, caste, color, religion, or sexual
+identity and orientation.
+
+We pledge to act and interact in ways that contribute to an open, welcoming,
+diverse, inclusive, and healthy community.
+
+## Our standards
+
+Examples of behavior that contributes to a positive environment for our
+community include:
+
+- Demonstrating empathy and kindness toward other people
+- Being respectful of differing opinions, viewpoints, and experiences
+- Giving and gracefully accepting constructive feedback
+- Accepting responsibility and apologizing to those affected by our mistakes,
+  and learning from the experience
+- Focusing on what is best not just for us as individuals, but for the overall
+  community
+
+Examples of unacceptable behavior include:
+
+- The use of sexualized language or imagery, and sexual attention or advances of
+  any kind
+- Trolling, insulting or derogatory comments, and personal or political attacks
+- Public or private harassment
+- Publishing others' private information, such as a physical or email address,
+  without their explicit permission
+- Other conduct which could reasonably be considered inappropriate in a
+  professional setting
+
+## Enforcement responsibilities
+
+Project maintainers are responsible for clarifying and enforcing our standards of
+acceptable behavior and will take appropriate and fair corrective action in
+response to any behavior that they deem inappropriate, threatening, offensive,
+or harmful.
+
+Project maintainers have the right and responsibility to remove, edit, or reject
+comments, commits, code, wiki edits, issues, and other contributions that are
+not aligned to this Code of Conduct, and will communicate reasons for moderation
+decisions when appropriate.
+
+## Scope
+
+This Code of Conduct applies within all community spaces, and also applies when
+an individual is officially representing the community in public spaces.
+Examples of representing our community include using an official e-mail address,
+posting via an official social media account, or acting as an appointed
+representative at an online or offline event.
+
+## Enforcement
+
+Instances of abusive, harassing, or otherwise unacceptable behavior may be
+reported to the project maintainers responsible for enforcement at
+**suporte@uniaogeek.com.br**.
+
+All complaints will be reviewed and investigated promptly and fairly.
+
+All project maintainers are obligated to respect the privacy and security of the
+reporter of any incident.
+
+## Attribution
+
+This Code of Conduct is adapted from the [Contributor Covenant][homepage],
+version 2.1, available at
+https://www.contributor-covenant.org/version/2/1/code_of_conduct.html.
+
+[homepage]: https://www.contributor-covenant.org
+
+For answers to common questions about this code of conduct, see
+https://www.contributor-covenant.org/faq

wordlistxpl_forge-1.0.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 André Henrique (https://github.com/mrhenrike)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

wordlistxpl_forge-1.0.0/MANIFEST.in

@@ -0,0 +1,8 @@
+include LICENSE
+include README.md
+include README.pt-BR.md
+include requirements.txt
+include SECURITY.md
+include CODE_OF_CONDUCT.md
+recursive-include data *.json *.txt
+recursive-include wfh_modules *.py *.json

wordlistxpl_forge-1.0.0/PKG-INFO

@@ -0,0 +1,125 @@
+Metadata-Version: 2.4
+Name: wordlistxpl-forge
+Version: 1.0.0
+Summary: WordlistXPL-Forge. Wordlist generation toolkit for authorized pentest and red team operations. Member of the XPL-Forge suite.
+Author-email: André Henrique <suporte@uniaogeek.com.br>
+Maintainer-email: André Henrique <suporte@uniaogeek.com.br>
+License-Expression: MIT
+Project-URL: Homepage, https://github.com/mrhenrike/WordlistXPL-Forge
+Project-URL: Documentation, https://github.com/mrhenrike/WordlistXPL-Forge/wiki
+Project-URL: Repository, https://github.com/mrhenrike/WordlistXPL-Forge
+Project-URL: Issues, https://github.com/mrhenrike/WordlistXPL-Forge/issues
+Project-URL: Changelog, https://github.com/mrhenrike/WordlistXPL-Forge/releases
+Keywords: wordlist,password,pentest,red-team,security,xpl-forge,osint,credential,default-credentials,pcfg,markov,keyboard-walk,hashcat-rules
+Classifier: Development Status :: 5 - Production/Stable
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Information Technology
+Classifier: Intended Audience :: System Administrators
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.8
+Classifier: Programming Language :: Python :: 3.9
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: Security
+Classifier: Topic :: Utilities
+Requires-Python: >=3.8
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: colorama>=0.4.6
+Requires-Dist: tqdm>=4.66.0
+Requires-Dist: requests>=2.31.0
+Requires-Dist: beautifulsoup4>=4.12.0
+Requires-Dist: lxml>=4.9.0
+Requires-Dist: chardet>=5.2.0
+Requires-Dist: unidecode>=1.3.6
+Provides-Extra: ocr
+Requires-Dist: easyocr>=1.7.0; extra == "ocr"
+Requires-Dist: Pillow>=10.0.0; extra == "ocr"
+Provides-Extra: docs
+Requires-Dist: openpyxl>=3.1.0; extra == "docs"
+Requires-Dist: pdfplumber>=0.10.0; extra == "docs"
+Requires-Dist: python-docx>=1.1.0; extra == "docs"
+Requires-Dist: striprtf>=0.0.26; extra == "docs"
+Provides-Extra: scrape
+Requires-Dist: pypdf>=4.0.0; extra == "scrape"
+Provides-Extra: full
+Requires-Dist: wordlistxpl-forge[docs,ocr,scrape]; extra == "full"
+Dynamic: license-file
+
+# WordlistXPL-Forge
+
+<p align="center">
+  <img src="https://img.shields.io/github/stars/mrhenrike/WordlistXPL-Forge?style=flat-square" alt="GitHub Stars">
+  <img src="https://img.shields.io/github/license/mrhenrike/WordlistXPL-Forge?style=flat-square" alt="License">
+  <img src="https://img.shields.io/badge/version-1.0.0-blue?style=flat-square" alt="Version">
+  <img src="https://img.shields.io/badge/python-3.8%2B-blue?style=flat-square&logo=python&logoColor=white" alt="Python 3.8+">
+  <img src="https://img.shields.io/pypi/v/wordlistxpl-forge?style=flat-square&logo=pypi&logoColor=white&color=green" alt="PyPI">
+</p>
+
+Wordlist generation toolkit for authorized pentest and red team work. Official member of the **XPL-Forge** suite. CLI: `wlf` / `python wlf.py`.
+
+Author: André Henrique (`mrhenrike`) | União Geek | https://uniaogeek.com.br/
+
+> Full command reference (every subcommand, flag, input and output): [docs/COMMAND-COVERAGE.md](docs/COMMAND-COVERAGE.md) · [Wiki](https://github.com/mrhenrike/WordlistXPL-Forge/wiki)
+
+---
+
+## Disclaimer
+
+This program is for **authorized security testing, lab work, and education only**. The author is **not responsible** for misuse of the code or of any function in this toolkit.
+
+The generator emits **many** password and username patterns (names, dates, brands, leet, years, keyboard walks, grammar models, and similar).
+
+If you, your company, or a user build secrets from **public information**, predictable patterns, or personal data (name, team, pet, date, brand, domain), the chance that this tool emits a wordlist containing a **real** password or username is **extremely high, almost certain**.
+
+That is not a leak and does not prove a prior breach. It is weak or predictable secret choice. Use a password manager and MFA.
+
+This repository **does not** distribute a Brazilian password corpus (`wlist_brasil`). It does ship vendor factory default credentials, username samples, and lab lists.
+
+---
+
+## Install
+
+```bash
+pip install wordlistxpl-forge
+pip install wordlistxpl-forge[full]
+```
+
+```bash
+git clone https://github.com/mrhenrike/WordlistXPL-Forge.git
+cd WordlistXPL-Forge
+pip install -r requirements.txt pyyaml
+python wlf.py --help
+wlf --help
+```
+
+Windows: `.\setup_venv.ps1` then `.\.venv\Scripts\Activate.ps1`. Linux/macOS: `chmod +x setup_venv.sh && ./setup_venv.sh`.
+
+## What is in this tree
+
+- Generator CLI (`wlf.py`, `wfh_modules/`)
+- Pattern JSON and ISP word banks
+- Vendor default credentials (`data/default_credentials.json`, `passwords/default-creds-combo.lst`)
+- Username list (`usernames/username_br.lst`)
+- Lab lists (`labs/*.lst`) and discovery paths (`fuzzing/discovery_br.lst`)
+
+Coverage matrix: [docs/COMMAND-COVERAGE.md](docs/COMMAND-COVERAGE.md)
+
+## Quick examples
+
+```bash
+python wlf.py charset 8 8 --limit 100 -o charset.lst
+python wlf.py pattern -t "{company}{year}!" --vars company=BrandX,CorpX year=2020-2026 -o patterns.lst
+python wlf.py default-creds --vendor mikrotik --format combo -o mikrotik_creds.lst
+python wlf.py dns -d acme.example --words dev staging api admin portal -o subdomains.lst
+python wlf.py profile --name "PessoaX" --nick robotx --birth 15/03/1990 --leet aggressive --limit 50 -o target.lst
+```
+
+## License
+
+MIT. See [LICENSE](LICENSE).
+
+[Português (Brasil)](README.pt-BR.md)

wordlistxpl_forge-1.0.0/README.md

@@ -0,0 +1,74 @@
+# WordlistXPL-Forge
+
+<p align="center">
+  <img src="https://img.shields.io/github/stars/mrhenrike/WordlistXPL-Forge?style=flat-square" alt="GitHub Stars">
+  <img src="https://img.shields.io/github/license/mrhenrike/WordlistXPL-Forge?style=flat-square" alt="License">
+  <img src="https://img.shields.io/badge/version-1.0.0-blue?style=flat-square" alt="Version">
+  <img src="https://img.shields.io/badge/python-3.8%2B-blue?style=flat-square&logo=python&logoColor=white" alt="Python 3.8+">
+  <img src="https://img.shields.io/pypi/v/wordlistxpl-forge?style=flat-square&logo=pypi&logoColor=white&color=green" alt="PyPI">
+</p>
+
+Wordlist generation toolkit for authorized pentest and red team work. Official member of the **XPL-Forge** suite. CLI: `wlf` / `python wlf.py`.
+
+Author: André Henrique (`mrhenrike`) | União Geek | https://uniaogeek.com.br/
+
+> Full command reference (every subcommand, flag, input and output): [docs/COMMAND-COVERAGE.md](docs/COMMAND-COVERAGE.md) · [Wiki](https://github.com/mrhenrike/WordlistXPL-Forge/wiki)
+
+---
+
+## Disclaimer
+
+This program is for **authorized security testing, lab work, and education only**. The author is **not responsible** for misuse of the code or of any function in this toolkit.
+
+The generator emits **many** password and username patterns (names, dates, brands, leet, years, keyboard walks, grammar models, and similar).
+
+If you, your company, or a user build secrets from **public information**, predictable patterns, or personal data (name, team, pet, date, brand, domain), the chance that this tool emits a wordlist containing a **real** password or username is **extremely high, almost certain**.
+
+That is not a leak and does not prove a prior breach. It is weak or predictable secret choice. Use a password manager and MFA.
+
+This repository **does not** distribute a Brazilian password corpus (`wlist_brasil`). It does ship vendor factory default credentials, username samples, and lab lists.
+
+---
+
+## Install
+
+```bash
+pip install wordlistxpl-forge
+pip install wordlistxpl-forge[full]
+```
+
+```bash
+git clone https://github.com/mrhenrike/WordlistXPL-Forge.git
+cd WordlistXPL-Forge
+pip install -r requirements.txt pyyaml
+python wlf.py --help
+wlf --help
+```
+
+Windows: `.\setup_venv.ps1` then `.\.venv\Scripts\Activate.ps1`. Linux/macOS: `chmod +x setup_venv.sh && ./setup_venv.sh`.
+
+## What is in this tree
+
+- Generator CLI (`wlf.py`, `wfh_modules/`)
+- Pattern JSON and ISP word banks
+- Vendor default credentials (`data/default_credentials.json`, `passwords/default-creds-combo.lst`)
+- Username list (`usernames/username_br.lst`)
+- Lab lists (`labs/*.lst`) and discovery paths (`fuzzing/discovery_br.lst`)
+
+Coverage matrix: [docs/COMMAND-COVERAGE.md](docs/COMMAND-COVERAGE.md)
+
+## Quick examples
+
+```bash
+python wlf.py charset 8 8 --limit 100 -o charset.lst
+python wlf.py pattern -t "{company}{year}!" --vars company=BrandX,CorpX year=2020-2026 -o patterns.lst
+python wlf.py default-creds --vendor mikrotik --format combo -o mikrotik_creds.lst
+python wlf.py dns -d acme.example --words dev staging api admin portal -o subdomains.lst
+python wlf.py profile --name "PessoaX" --nick robotx --birth 15/03/1990 --leet aggressive --limit 50 -o target.lst
+```
+
+## License
+
+MIT. See [LICENSE](LICENSE).
+
+[Português (Brasil)](README.pt-BR.md)

wordlistxpl_forge-1.0.0/README.pt-BR.md

@@ -0,0 +1,52 @@
+# WordlistXPL-Forge
+
+<p align="center">
+  <img src="https://img.shields.io/github/stars/mrhenrike/WordlistXPL-Forge?style=flat-square" alt="GitHub Stars">
+  <img src="https://img.shields.io/github/license/mrhenrike/WordlistXPL-Forge?style=flat-square" alt="License">
+  <img src="https://img.shields.io/badge/version-1.0.0-blue?style=flat-square" alt="Version">
+  <img src="https://img.shields.io/badge/python-3.8%2B-blue?style=flat-square&logo=python&logoColor=white" alt="Python 3.8+">
+</p>
+
+Toolkit de geração de wordlists para pentest e red team autorizados. Membro oficial da suíte **XPL-Forge**. CLI: `wlf` / `python wlf.py`.
+
+Autor: André Henrique (`mrhenrike`) | União Geek | https://uniaogeek.com.br/
+
+> Referência completa de cada subcomando, flag, entrada e saída: [docs/COMMAND-COVERAGE.md](docs/COMMAND-COVERAGE.md) · [Wiki](https://github.com/mrhenrike/WordlistXPL-Forge/wiki)
+
+---
+
+## Aviso
+
+Este programa é só para **testes de segurança autorizados, laboratório e educação**. O autor **não se responsabiliza** por uso indevido do código nem das funções.
+
+O gerador emite **muitos** padrões de senha e username (nome, data, marca, leet, ano, teclado, gramática e similares).
+
+Se você, sua empresa ou um usuário montam segredos a partir de **informação pública**, padrões previsíveis ou dados pessoais (nome, time, pet, data, marca, domínio), a chance de o programa emitir uma wordlist com uma senha ou username **real** é **altíssima, quase certa**.
+
+Isso não é leak e não prova comprometimento prévio. É senha fraca ou previsível. Use gerenciador de senhas e MFA.
+
+Este repositório **não** distribui o corpus brasileiro de senhas (`wlist_brasil`). Distribui credenciais default de fabricantes, amostras de username e listas de lab.
+
+---
+
+## Instalação
+
+```bash
+pip install wordlistxpl-forge
+pip install wordlistxpl-forge[full]
+```
+
+```bash
+git clone https://github.com/mrhenrike/WordlistXPL-Forge.git
+cd WordlistXPL-Forge
+pip install -r requirements.txt pyyaml
+python wlf.py --help
+```
+
+Cobertura de comandos: [docs/COMMAND-COVERAGE.md](docs/COMMAND-COVERAGE.md)
+
+## Licença
+
+MIT. Ver [LICENSE](LICENSE).
+
+[English](README.md)

wordlistxpl_forge-1.0.0/SECURITY.md

@@ -0,0 +1,29 @@
+# Security Policy
+
+## Supported versions
+
+| Version | Supported |
+|---------|-----------|
+| 1.0.x   | yes       |
+
+This public tree does **not** ship a Brazilian password corpus. Vendor factory defaults, username samples, and lab lists are included for authorized testing.
+
+The generator can emit a real password or username when secrets follow public or predictable patterns. That is expected behavior of weak secrets, not a data leak. See the README disclaimer.
+
+## Reporting a vulnerability
+
+Do not open a public GitHub issue for security reports.
+
+1. Email **suporte@uniaogeek.com.br**
+2. Or use [GitHub Security Advisories](https://github.com/mrhenrike/WordlistXPL-Forge/security/advisories)
+
+Include description, reproduction steps, impact, and a suggested fix when you have one.
+
+## Response timeline
+
+| Action | Target |
+|--------|--------|
+| Acknowledgment | 72 hours |
+| Initial assessment | 7 days |
+| Fix or mitigation | 30 days |
+| Public disclosure | After fix |