Development · GitHub repo

BabelStrike

Transliterate non-Latin names and generate username wordlists for security assessments

Visit github.com ↗

BabelStrike is a Python CLI tool created for penetration testers and red teams to romanize scraped full names and words written in non-English scripts. It maps international alphabets into Latin characters and outputs standard enterprise username permutations. This helps testers create accurate targeting lists from scraped sources like LinkedIn when testing multinational organizations.

What it's for

  • Convert scraped international employee names into Latin username wordlists
  • Transliterate non-English web spidering wordlists (e.g., from CeWL) into Latin equivalents
  • Generate username permutations with custom domain prefixes for credential spraying attacks
  • Test reversed name order variations for non-Western naming conventions

Features

  • Transliterates multiple non-Latin and accented alphabets (including Greek, Hindi, Spanish, French, Polish, Danish, Portuguese, and Hungarian)
  • Automatic language detection for input text files
  • Generates common enterprise username formats with configurable separators (periods, underscores, hyphens)
  • Handles middle names in username permutations
  • Reverses name order testing via the -a flag
  • Appends Active Directory domain prefixes (e.g., DOMAIN\user)
  • Extensible language support through custom character substitution mapping classes

Pricing

Open source. Free (CC BY-NC 4.0)

Details

Type
GitHub repo
Category
Development
Topic
Security & Pentesting
Open source
Yes
Platforms
Command line, Linux
For
Penetration testers and red team operators
Alternative to
username-anarchy, namemash
Tags
pentesting, red team, osint, wordlists, transliteration, cli

Why it was saved

  • @d3ndr1t30x, 4 January 2024: It automates the romanization and username permutation process for international target name lists (e.g., Greek, Hindi/Devanagari, Cyrillic) when conducting credential spraying or brute-force attacks.

Related

  • Argus

    Python interactive CLI toolkit for automated OSINT, network reconnaissance, and security checks

  • holehe

    Check if an email address is registered across 120+ online platforms.

  • OpenOSINT

    AI OSINT agent, MCP server, and framework chaining intelligence tools

  • VoidAccess

    Self-hosted dark web OSINT tool for automated threat intelligence.

  • agent-browser

    Browser automation CLI and engine purpose-built for AI agents

  • Boneyard

    Auto-generates pixel-perfect skeleton screens directly from your real rendered DOM

Updated