For those who use legitimate packs, the primary goal is often credential stuffing—taking lists of leaked usernames and passwords from old data breaches and testing them against other sites. Because many people reuse passwords, these automated packs can successfully take over accounts at a massive scale.

A "Config Pack" is essentially a digital toolkit. For a security professional, it’s a collection of scripts—or "configs"—that automate the process of checking how a website handles thousands of login attempts. These configs tell the OpenBullet software exactly how to interact with a specific site, such as where to "stuff" a username and password and how to recognize if a login was successful.

What is OpenBullet? Automated Attacks by Cybercriminals - Kasada