+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Misc (https://hashcat.net/forum/forum-15.html)
+--- Forum: General Talk (https://hashcat.net/forum/forum-33.html)
+--- Thread: rockyou replacement imminent? (/thread-4668.html)
rockyou replacement imminent? - rico - 09-10-2015
Just spotted this: http://cynosureprime.blogspot.se/2015/09/how-we-cracked-millions-of-ashley.html
11.2 million passwords recovered so far - would be a nice addition to anyone's wordlist collection (not that I'll ever manage to get my hands on it...
I wonder did they use hashcat for the md5($salt.$pass) part?
RE: rockyou replacement imminent? - epixoip - 09-11-2015
Certainly won't be a replacement for rockyou, rockyou was 32 million. But good stats nonetheless. Will be good to correlate non-uniq between both.
RE: rockyou replacement imminent? - Waffle - 09-11-2015
(09-10-2015, 03:52 PM)rico Wrote: Just spotted this: http://cynosureprime.blogspot.se/2015/09/how-we-cracked-millions-of-ashley.html
11.2 million passwords recovered so far - would be a nice addition to anyone's wordlist collection (not that I'll ever manage to get my hands on it...
I wonder did they use hashcat for the md5($salt.$pass) part?
We used MDXfind for the first finds. Later, we reformatted the files so we could use oclhashcat as well. We did not use hashcat. oclhashcat cannot find MD5AM2 yet, and appears to have some limits on what we could use for MD5AM .
Validation of bcrypt was a custom program, as nothing existing would be feasible to run.
RE: rockyou replacement imminent? - rico - 09-11-2015
That's some fine work, Waffle. Bet it was fun as hell too.
Well done to you all.
RE: rockyou replacement imminent? - alert - 09-12-2015
yep ... should see how much is left after cleaning of copy, random & allready known(ex:rockyou)
but nonethless GREAT WORK !