PassGAN

This repository is updated version of @brannondorsey/PassGAN for Python 3 & TensorFlow 1.13, contains code for the PassGAN: A Deep Learning Approach for Password Guessing paper.

The model from PassGAN is taken from Improved Training of Wasserstein GANs and it is assumed that the authors of PassGAN used the improved_wgan_training tensorflow implementation in their work.

This repo contributes:

• A command-line interface sample.py train.py
• A pretrained PassGAN model trained on the RockYou dataset
• Jupyter notebook for debugging notebook-sample.py notebook-train.py

Getting Started

# requires CUDA 8 to be pre-installed
pip3 install -r requirements.txt

Generating password samples data taken from social media platforms.

run 34.py  which will take the data of a particular person from social media and generate numerous combination of passwords
then add this file to the generated_pass.txt

Generating password samples

Use the pretrained model to generate 1,000,000 passwords, saving them to generated_pass.txt.

python sample.py \
	--input-dir pretrained \
	--checkpoint pretrained/checkpoints/checkpoint_200000.ckpt \
	--output generated_pass.txt \
	--batch-size 1024 \
	--num-samples 1000000

Training your own models

You can downlaod sample datasets from release page, or generate sample rockyou dataset by yourself with codes under bin.

Training a model on a large dataset (100MB+) can take several hours on a GTX 1080.

# download the rockyou training data
# contains 80% of the full rockyou passwords (with repeats)
# that are 10 characters or less
curl -L -o data/train.txt https://github.com/d4ichi/PassGAN/releases/download/data/rockyou-test.txt

# train for 200000 iterations, saving checkpoints every 5000
# uses the default hyperparameters from the paper
python train.py --output-dir output --training-data data/train.txt

You are encouraged to train using your own password leaks and datasets. Some great places to find those include:

• LinkedIn leak (1.7GB compressed, direct download. Mirror from Hashes.org)
• Exploit.in torrent (10GB+, 800 million accounts. Infamous!)
• Hashes.org: Awesome shared password recovery site. Consider donating if you have the resources ;)