Automatic credential generation for authentication penetration testing

Abstract

Provided herein are techniques to automatic credential generation for use in authentication penetration, such as for assets of an enterprise. In one example, a method may include gathering public credentials from a plurality of credential databases; generating, using machine learning logic, one or more sets of the public credentials for each of one or more credential categories, wherein each credential category is associated with at least one credential characteristic. The method may further include gathering enterprise data for an enterprise, the enterprise data including user data for users of enterprise assets; categorizing, using the machine learning logic, the enterprise data into at least one credential category of the one or more credential categories, wherein the at least one credential category is associated with credential generation rules; and generating a plurality of testing credentials based on the enterprise data and the credential generation rules of the at least one credential category.