Is my plan a good idea?
#13
(12-29-2014, 09:29 AM)epixoip Wrote: Rainbow tables don't actually store the hash value, they store hash chains using a reduction function. So you still have to do quite a bit of calculation and false-alarm checking to look up a hash in a rainbow table, it is by no means instantaneous. And it does not scale well; the more hashes you have, the slower it gets. Rainbow tables are slow as shit with e.g. 20k hashes.

For much faster lookups you could store the hash (hopefully as a binary blob) in an indexed database. The tradeoff here is significantly more disk space since you're not using any reduction function, and it still won't be incredibly fast since your index will be way too large to hold in memory. If you don't care about disk space and have a few months you can spend running your laptop 24/7 to generate and index this table, then this would probably be what you'd want to do.

But again, I can't stress enough that this is a very silly solution to your perceived problem. It would be much better to just run straight dictionary attacks against fast hashes on your CPU, and leave your GPU to do more advanced high-yield attacks. And it doesn't really matter that you only have a laptop with a weak CPU and GPU. Several members of Team Hashcat got their start with only a netbook with an embedded CPU and no GPU, and have been more successful than people with multiple high-end GPUs because they are smart about their attacks.

And remember, quality over quantity. Most wordlists you download from the Internet are going to be pure garbage, and the larger it is the more garbage you're going to have in there.

Thanks for enlightening me on how a rainbow table works, I wasn't quite sure.

I have made a couple of wordlists myself, one being small, made up of a few small leaks, including, myspace, twitter and 10k most common passwords. Also a bigger one.

http://forum.insidepro.com/viewtopic.php?t=34386

Feel free to try it out.

What I find weird is, my CPU doesn't seem to be at its full potential. On a straight wordlist run, it says ~20 MH/s, but it only seems to run at ~10 MH/s. My wordlist has 302M words.

302,000,000 / 20,000,000 = 15

However it takes 27 seconds to complete. When running through a list of 45k hashes it takes 42 seconds. Which is ~7 MH/s, although it displays an average of 10 MH/s.

Threads: 4
Segments Size: 64MB
i5-2450M

Is there a bottleneck? Maybe my hard drive?


Messages In This Thread
Is my plan a good idea? - by Saint - 12-28-2014, 08:48 PM
RE: Is my plan a good idea? - by epixoip - 12-28-2014, 09:29 PM
RE: Is my plan a good idea? - by Saint - 12-28-2014, 09:44 PM
RE: Is my plan a good idea? - by rsberzerker - 12-28-2014, 11:28 PM
RE: Is my plan a good idea? - by Saint - 12-28-2014, 11:40 PM
RE: Is my plan a good idea? - by epixoip - 12-28-2014, 11:48 PM
RE: Is my plan a good idea? - by Saint - 12-29-2014, 12:03 AM
RE: Is my plan a good idea? - by undeath - 12-29-2014, 01:42 AM
RE: Is my plan a good idea? - by Saint - 12-29-2014, 01:46 AM
RE: Is my plan a good idea? - by epixoip - 12-29-2014, 12:19 AM
RE: Is my plan a good idea? - by Saint - 12-29-2014, 12:38 AM
RE: Is my plan a good idea? - by epixoip - 12-29-2014, 09:29 AM
RE: Is my plan a good idea? - by Saint - 12-29-2014, 01:41 PM
RE: Is my plan a good idea? - by epixoip - 12-29-2014, 10:28 PM
RE: Is my plan a good idea? - by Saint - 12-29-2014, 10:34 PM
RE: Is my plan a good idea? - by epixoip - 12-29-2014, 10:55 PM
RE: Is my plan a good idea? - by forumhero - 12-29-2014, 11:42 PM
RE: Is my plan a good idea? - by Saint - 12-30-2014, 05:52 PM
RE: Is my plan a good idea? - by blazer - 12-30-2014, 06:34 PM
RE: Is my plan a good idea? - by Saint - 12-31-2014, 05:21 PM
RE: Is my plan a good idea? - by Saint - 01-01-2015, 03:29 PM
RE: Is my plan a good idea? - by epixoip - 01-02-2015, 01:26 AM
RE: Is my plan a good idea? - by Saint - 01-02-2015, 12:43 PM
RE: Is my plan a good idea? - by epixoip - 01-02-2015, 01:41 PM