Automatic credential generation for authentication penetration testing

One or more non-transitory computer readable storage media encoded with instructions that, when executed by a processor, cause the processor to perform operations, comprising:

• gathering public credentials from a plurality of credential databases;
• generating, using machine learning logic, a plurality of sets of the public credentials for each of a plurality of credential categories, wherein the plurality of credential categories include at least a user name category and a date of birth category;
• gathering enterprise data for an enterprise, the enterprise data including user data of enterprise users of enterprise assets;
• categorizing, using the machine learning logic, the enterprise data into each of a credential category of the plurality of credential categories;
• generating, using the machine learning logic, a plurality of customized penetration testing credentials in which the plurality of customized penetration testing credentials are generated using the enterprise data that includes the user data of the enterprise users of the enterprise assets and using credential generation rules that indicate formatting and permutations for each credential category;
• and
• performing penetration testing of the enterprise assets using the plurality of customized penetration testing credentials.

A system comprising:

• at least one memory element for storing data;
• and
• at least one processor for executing instructions associated with the data, wherein executing the instructions causes the system to perform operations, comprising:
• gathering public credentials from a plurality of credential databases;
• generating, using machine learning logic, a plurality of sets of the public credentials for each of a plurality of credential categories, wherein the plurality of credential categories include at least a user name category and a date of birth category;
• gathering enterprise data for an enterprise, the enterprise data including user data of enterprise users of enterprise assets;
• categorizing, using the machine learning logic, the enterprise data into each of a credential category of the plurality of credential categories;
• generating, using the machine learning logic, a plurality of customized penetration testing credentials in which the plurality of customized penetration testing credentials are generated using the enterprise data that includes the user data of the enterprise users of the enterprise assets and using credential generation rules that indicate formatting and permutations for each credential category;
• and
• performing penetration testing of the enterprise assets using the plurality of customized penetration testing credentials.