c/cybersecurity · by birdcat@lemmy.ml · 2y

create fake password manager export

Im looking to create a real looking .cvs or .json file as if it was exported from a password manager.

E-Mail should always be the same and of my choice. Username should not be weird/random letters.
Websites should be real, random standard websites like facebook, twitter, instagram etc. no weird stuff.
bonus if it has credit cards or notes like "bitcoin wallet".

I found mockaroo, but the stuff it generates is too random. Any other tools that are suitable for this and can be used by a noob?

Many thanks!

9 points · 12 comments · view on lemmy.world

12 Comments

Diplomjodler@feddit.de · 5 pts · 2y (1 reply)

This sort of thing is trivial to do with Python. If you have to do stuff like this often, it's definitely worth investing a few hours into learning it.

birdcat@lemmy.ml · 4 pts · 2y

It's not really important, more like a joke born out of boredom. But now if someone finds my veracrypt usb and manages to crack the first password, they will be trolled a bit and can read this beautiful diary entry (which GPT wrote)

Dear diary, let me tell you, nobody knows cyber security like I do. It's true. We've got the best, the most tremendous cyber security in the world. It's not even close. Our encryption? It's so strong, so powerful, even the smartest hackers—very smart people, by the way—they can't crack it. They try and they try, but they just can't do it. It's like trying to break into Fort Knox, but even tougher. Believe me. And DDoS attacks? Please. They're like little mosquitoes to us. We swat them away without even breaking a sweat. Our firewalls are like this massive, beautiful wall, and I know something about building walls. They're the biggest, the best. Nothing gets through. Nothing. And phishing? We spot those a mile away. Our people are so alert, so vigilant, it's like they have a sixth sense for these things. Our antivirus software? It's like the superhero of software. It's so advanced, so ahead of its time, that viruses give up. They see our defenses and say, "Nope, not going there. Too tough." It's incredible, really. So when I say we have the best cyber security, I'm not exaggerating. It's not just good, it's the best. It's fantastic, folks. Absolutely fantastic.

😅

entropicshart@sh.itjust.works · 4 pts · 2y

This would be pretty easy to script with a fake data generator like mimesis, that can use existing providers, choose random options from a given set, and allows the creation of custom providers (e.g. pick a random website from a file of valid websites that you would like it to use)

jaemo@sh.itjust.works · 4 pts · 2y

I'm a rubyist so I'd use ruby + faker, but there's a port of faker for just about any language...

akilou@sh.itjust.works · 4 pts · 2y (1 reply)

Export a real one then modify it

birdcat@lemmy.ml · 2 pts · 2y

ya peobaby faster than figuring out how to automate it 😅

Venator@lemmy.nz · 2 pts · 2y

Sounds like a pretty niche task. Probably easiest to write a python or bash script to do it, maybe you could start with a real export and remove all the passwords, then add newly generated ones with a simple regex find and replace.

lordnikon@lemmy.world · 2 pts · 2y (2 replies)

I would not recommend using a real one and modifying it. As it creates creates a list of sites that can be targeted for other forms of entry. Like social engineering and recovery methods.

birdcat@lemmy.ml · 1 pts · 2y (1 reply)

i made a real one with lastpass and exported them, but none of the accounts exist and i dont use any of the sites.

lordnikon@lemmy.world · 2 pts · 2y

ah that makes more sense

Murkhat@feddit.de · 2 pts · 2y

I would suggest to write a Python script together with https://pypi.org/project/Faker/ - might not be the noob-friendliest, but also not too hard to do

akilou@sh.itjust.works · 2 pts · 2y

Export a real one then modify it