catana
by D3vil0p3r
CATANA is a command-line tool that filters wordlists based on specified password policies to optimize password security testing.
CATANA - CUT your Wordlist!
Primary Use Case
Security professionals and penetration testers use CATANA to refine large password wordlists by applying password policy filters, making password cracking attempts more efficient. It is particularly useful when preparing wordlists tailored to specific password requirements during security assessments.
- Filters wordlists according to specified password policies
- Supports input and output file handling
- Random colored output option for better readability
- Simple CLI interface with help documentation
- Available as a package on BlackArch Linux
Installation
- git clone https://github.com/D3vil0per/catana
- cd catana
- chmod 755 catana
- Or install via BlackArch Linux package manager: pacman -S catana
Usage
>_ catana -i rockyou.txtFilters the input wordlist 'rockyou.txt' according to the default password policy and outputs to console.
>_ catana -i rockyou.txt -o wl.txtFilters the input wordlist 'rockyou.txt' and saves the filtered output to 'wl.txt'.
- Integrate CATANA into red team workflows to tailor password attacks efficiently, reducing noise and increasing success rates.
- Use CATANA to generate policy-compliant wordlists for blue team password audit tools to improve password policy enforcement.
- Automate wordlist filtering in CI/CD pipelines to ensure penetration tests use relevant password datasets.
- Combine CATANA with hash cracking tools like Hashcat or John the Ripper for optimized credential access attempts.
- Leverage CATANA outputs to educate users and administrators on effective password policy configurations.
Docs Take 2 Hours. AI Takes 10 Seconds.
Ask anything about catana. Installation? Config? Troubleshooting? Get answers trained on real docs and GitHub issues—not generic ChatGPT fluff.
This tool hasn't been indexed yet. Request indexing to enable AI chat.
Admin will review your request within 24 hours
Related Tools
dumb-password-rules
duffn/dumb-password-rules
A compilation of sites with dumb password rules.

runner
hashtopolis/runner
Server background runner for Hashtopolis to run specific services
ZipCracker
bylickilabs/ZipCracker
Python tool for recovering passwords from ZIP archives via dictionary or brute-force attack

crawdad
passlab-sec/crawdad
Password security auditing tool for login over HTTP GET or HTTP Basic Authentication.
