Username Anarchy is an open source command line tool designed to generate possible usernames for use in penetration testing and security assessments. It focuses on solving one of the common challenges in authentication attacks: identifying valid usernames before attempting password attacks. It generates large sets of potential usernames based on a person’s name and common naming conventions used in corporate or online systems. These generated username lists can then be used for activities such as username enumeration, password spraying, or brute force testing during security audits. Username Anarchy supports numerous formatting styles, allowing security testers to replicate patterns commonly used in enterprise environments such as first.last, flast, or firstinitiallastname. Username Anarchy can also utilize name sources gathered from OSINT techniques such as social networks or other public data to produce realistic username lists.
Features
- Generates large lists of possible usernames from first and last names
- Supports many common username formats such as first.last or flast
- Plugin system for defining and extending custom username formats
- Format string system for flexible username pattern creation
- Includes datasets of common first and last names by country
- Provides lists of common forum usernames ordered by popularity