Duplicut is a modern password wordlist creation usually implies concatenating multiple data sources.
Ideally, most probable passwords should stand at start of the wordlist, so most common passwords are cracked instantly.
With existing dedupe tools you are forced to choose if you prefer to preserve the order OR handle massive wordlists.
Unfortunately, wordlist creation requires both:
So i wrote duplicut in highly optimized C to address this very specific need
Quick start
git clone https://github.com/nil0x42/duplicut
cd duplicut/ && make
./duplicut wordlist.txt -o clean-wordlist.txt
Options
Features
-l
option)-p
option)Implementation
Limitations
Technical Details
1- Memory optimized
An uint64
is enough to index lines in hashmap, by packing size
info within pointer’s extra bits:
2- Massive file handling
If whole file can’t fit in memory, it is split into virtual chunks, then each one is tested against next chunks.
So complexity is equal to th triangle number:
Throubleshotting
If you find a bug, or something doesn’t work as expected, please compile duplicut in debug mode and post an issue with attached output:
SpyAI is a sophisticated form of malware that leverages advanced technologies to capture and analyze…
The Proxmark3 is a versatile, open-source tool designed for radio-frequency identification (RFID) security analysis, research,…
The "Awesome Solana Security" collection is a comprehensive resource designed to help developers build more…
The "IngressNightmare" vulnerabilities, disclosed in March 2025, represent a critical set of security issues affecting…
AdaptixC2 is an advanced post-exploitation and adversarial emulation framework designed specifically for penetration testers. It…
Bincrypter is a powerful Linux binary runtime crypter written in BASH. It is designed to…