allow users to apply "rules" to existing wordlists, automatically adding common suffixes (like
CUPP is a command-line tool that interactively asks questions about the target and generates a tailored wordlist.
WPA2 uses a 4-way handshake to authenticate devices. Without getting too deep into the math, here is the critical takeaway: You can only guess it.
The attacker runs each word from the list through the WPA2 hashing algorithm to see if the resulting output matches the captured handshake.