Combolist-grade synthetic credentials for red team operations
CredForge generates realistic-looking email:password combinations that match the patterns found in actual data breaches. Multi-country name databases, real-world password habits, and optional PII/credit card generation for simulation exercises.
Use cases: Phishing simulations, red team credential harvesting demos, database population, tool testing, SOC detection validation.
| Feature | Details |
|---|---|
| 9 Countries | US, UK, France, Germany, Russia, Middle East, Japan, Brazil, India |
| 1,260+ Names | Culturally accurate first + last names per region |
| 17 Password Patterns | Leetspeak, seasons, birth dates, special chars, common bases β mirrors real human password creation |
| Domains | Gmail, Yahoo, Outlook, iCloud, ProtonMail, Yandex, Mail.ru, country-specific (T-Online, Orange.fr, Bol.com.br, etc.) |
| PII (optional) | Phone, full address, ZIP code, SSN (US), security questions + answers |
| Credit Cards (optional) | Luhn-valid format (Visa/MC/Amex/Discover) β not real cards |
| 5 Output Formats | email:pass β username:pass β email:pass:name β full PII dump β full PII + CC |
git clone https://github.com/Adam-ZS/credforge
cd credforge
python3 credforge.pyFollow the prompts:
Lines to generate [100]: 5000
Output format:
1) email:password
2) email:password:fullname
3) Full PII + SSN β
4) Full PII + SSN + CC β β
Format [1]: 1
Country (blank=worldwide) [all]: br
Output file [combolist.txt]: brazil_creds.txt
Generating 5000 credentials...
β Saved brazil_creds.txt (186,204 bytes)
marina.silva89@gmail.com:Summer1987!
lucas.oliveira73@yahoo.com.br:P@ssw0rd1992
joao24@bol.com.br:Admin%2001@
james.smith42@gmail.com:Winter1998!:James Smith:+1-305-472-8910:7423 Main St, Miami, FL 33101:492-81-7037
maria.garcia22@yahoo.com:Passw0rd1974:Maria Garcia:+1-818-739-2041:1529 Oak Ave, Los Angeles, CA 90012:618-53-2091:4532418573947267:08/28:342
| Mode | Fields |
|---|---|
| 1 | email:password |
| 2 | email:password:full_name |
| 3 | email:password:full_name:phone:address:ssn |
| 4 | email:password:full_name:phone:address:ssn:cc_number:cc_expiry:cc_cvv |
All formats may append Q:security_question A:answer (30% chance).
| Code | Country | Domains Included |
|---|---|---|
us |
United States | gmail, yahoo, hotmail, aol, icloud |
uk |
United Kingdom | btinternet, virginmedia, sky, talktalk |
fr |
France | orange, free, sfr, wanadoo, laposte |
de |
Germany | t-online, web, gmx, freenet, 1und1 |
ru |
Russia | mail, yandex, rambler, bk |
jp |
Japan | yahoo.co.jp, docomo, ezweb, softbank |
br |
Brazil | bol, uol, ig, globo, terra |
in |
India | rediffmail, indiatimes, sify, yahoo.co.in |
ar |
Middle East | outlook.sa, yahoo, hotmail |
Leave blank for worldwide (weighted distribution).
- Python 3.6+
- Standard library only β zero dependencies
All credentials generated by CredForge are synthetic and randomized. They do not correspond to real individuals or accounts. No data is sourced from actual breaches. This tool is intended for authorized security testing, simulation exercises, and educational purposes only.
MIT
Adam-ZS