Permutation & Combination Generator
Generate permutations and combinations from character sets or word lists - perfect for security testing, password cracking wordlists, and penetration testing
About Permutation & Combination Generator
Overview
The Permutation & Combination Generator is a powerful tool designed for security professionals, penetration testers, and ethical hackers. It generates all possible arrangements (permutations) or selections (combinations) from a given set of items, making it ideal for creating custom wordlists, testing password patterns, and conducting security assessments. All processing happens locally in your browser, ensuring your data remains completely private.
Features
- Generate permutations (nPr) and combinations (nCr)
- Support for repetition/replacement mode (important for password cracking)
- Multiple input parsing modes: line-by-line, comma-separated, or character sets
- Quick presets for common character sets (digits, letters, symbols)
- Real-time calculation of possible results before generation
- Configurable output limits to prevent browser freezing
- Download large result sets as text files
- One-click copy to clipboard for smaller sets
- 100% browser-based - your data never leaves your device
- Perfect for creating custom wordlists for security testing
- Supports character sets, word lists, and mixed inputs
How to Use
- Enter your items (characters, words, or patterns) in the input area
- Choose your parse mode: line-by-line, comma-separated, or character-by-character
- Select between Permutation (order matters) or Combination (order doesn't matter)
- Set the selection size (r) - how many items to select from your set
- Enable "Allow Repetition" if items can be reused (common for password generation)
- Set an output limit to prevent browser freezing with large result sets
- Click "GENERATE RESULTS" to create your wordlist
- Copy results to clipboard or download as a text file
FAQ
What is the difference between permutation and combination?
Permutation considers order important, so "abc" and "bac" are different. Combination ignores order, so they would be the same. For example, if selecting 2 letters from {a,b,c}, permutations are: ab, ba, ac, ca, bc, cb (6 results). Combinations are: ab, ac, bc (3 results).
When should I use "Allow Repetition" mode?
Enable repetition when items can be reused multiple times, such as when generating password patterns where the same character can appear multiple times. For example, with {a,b} and size 2 with repetition, you get: aa, ab, ba, bb. Without repetition: ab, ba.
How is this useful for penetration testing?
Security professionals use this tool to create custom wordlists for password cracking, testing default credentials, or fuzzing applications. You can generate all possible combinations of known patterns, such as company name variations, common passwords with number suffixes, or character substitutions used in weak passwords.
Why is there an output limit?
Generating millions of results can freeze or crash your browser due to memory limitations. The output limit prevents this by capping displayed results. You can still download the full result set incrementally, or adjust your parameters to generate fewer results at once.
What is the maximum size I can generate?
There is no hard limit, but practical limits depend on your device. Generally, anything over 100,000 results should be downloaded rather than displayed. For very large sets (10+ million), consider breaking the generation into smaller batches or using specialized command-line tools like crunch or john.