PHPackages                             mcdruid/wapuu-the-ripper - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Security](/categories/security)
4. /
5. mcdruid/wapuu-the-ripper

ActiveWp-cli-package[Security](/categories/security)

mcdruid/wapuu-the-ripper
========================

A password cracker for WordPress

v0.1.0(6y ago)28MITPHP

Since Dec 3Pushed 6y ago1 watchersCompare

[ Source](https://github.com/mcdruid/wapuu-the-ripper)[ Packagist](https://packagist.org/packages/mcdruid/wapuu-the-ripper)[ Docs](https://github.com/mcdruid/wapuu-the-ripper)[ RSS](/packages/mcdruid-wapuu-the-ripper/feed)WikiDiscussions master Synced today

READMEChangelogDependencies (2)Versions (2)Used By (0)

mcdruid/wapuu-the-ripper
========================

[](#mcdruidwapuu-the-ripper)

[![](wapuu_the_ripper.png)](wapuu_the_ripper.png)

A password cracker for WordPress (WP-CLI)

Quick links: [Using](#using) | [Installing](#installing) | [Credits](#credits)

Using
-----

[](#using)

NAME

wp wtr

DESCRIPTION

Wapuu the Ripper - a tool to crack user passwords.

SYNOPSIS

`wp wtr [--role=] [--=] [--top=] [--all] [--hide] [--no-guessing]`

Based on [Drop the Ripper](https://www.drupal.org/project/drop_the_ripper) for Drupal.

Users can be filtered via arguments supported by [WP\_User\_Query()](https://developer.wordpress.org/reference/classes/wp_user_query/prepare_query/).

OPTIONS

\[`--role=`\] Only check users with a certain role.

\[`--=`\] Filter users by one or more arguments of WP\_User\_Query().

\[`--top=`\] Use the top x passwords from the wordlist (default is 25).

\[`--all`\] Use all of the passwords from the wordlist.

\[`--hide`\] Do not show plaintext passwords in output.

\[`--no-guessing`\] Disables built-in password guessing (e.g. username as password).

\[`--wordlist=`\] Path to a custom wordlist (default is openwall's password list).

EXAMPLES

wp wtr

wp wtr --top=100 --role=administrator

wp wtr --all --role\_\_not\_in=subscriber

wp wtr --exclude=1 --hide

wp wrt --wordlist=/tmp/rockyou.txt --include=2,3,4

Installing
----------

[](#installing)

You can install this package with:

```
wp package install git@github.com:mcdruid/wapuu-the-ripper.git

```

Credits
-------

[](#credits)

- WtR uses a default wordlist from
-  for suggesting the name!

###  Health Score

22

—

LowBetter than 22% of packages

Maintenance20

Infrequent updates — may be unmaintained

Popularity7

Limited adoption so far

Community7

Small or concentrated contributor base

Maturity47

Maturing project, gaining track record

 Bus Factor1

Top contributor holds 100% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Unknown

Total

1

Last Release

2352d ago

### Community

Maintainers

![](https://www.gravatar.com/avatar/50bec67fb7d063e0440570bf23111472ee7c803cce376e9e05624d0260e9fbf3?d=identicon)[mcdruid](/maintainers/mcdruid)

---

Top Contributors

[![mcdruid](https://avatars.githubusercontent.com/u/634209?v=4)](https://github.com/mcdruid "mcdruid (16 commits)")

###  Code Quality

TestsBehat

### Embed Badge

![Health badge](/badges/mcdruid-wapuu-the-ripper/health.svg)

```
[![Health](https://phpackages.com/badges/mcdruid-wapuu-the-ripper/health.svg)](https://phpackages.com/packages/mcdruid-wapuu-the-ripper)
```

###  Alternatives

[defuse/php-encryption

Secure PHP Encryption Library

3.9k162.4M214](/packages/defuse-php-encryption)[roave/security-advisories

Prevents installation of composer packages with known security vulnerabilities: no API, simply require it

2.9k97.3M6.4k](/packages/roave-security-advisories)[mews/purifier

Laravel 5/6/7/8/9/10 HtmlPurifier Package

2.0k16.7M113](/packages/mews-purifier)[robrichards/xmlseclibs

A PHP library for XML Security

41278.1M118](/packages/robrichards-xmlseclibs)[bjeavons/zxcvbn-php

Realistic password strength estimation PHP library based on Zxcvbn JS

86917.5M63](/packages/bjeavons-zxcvbn-php)[illuminate/encryption

The Illuminate Encryption package.

9229.7M280](/packages/illuminate-encryption)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)