09-11-2015, 05:37 AM
(09-10-2015, 03:52 PM)rico Wrote: Just spotted this: http://cynosureprime.blogspot.se/2015/09...shley.html
11.2 million passwords recovered so far - would be a nice addition to anyone's wordlist collection (not that I'll ever manage to get my hands on it...
I wonder did they use hashcat for the md5($salt.$pass) part?
We used MDXfind for the first finds. Later, we reformatted the files so we could use oclhashcat as well. We did not use hashcat. oclhashcat cannot find MD5AM2 yet, and appears to have some limits on what we could use for MD5AM .
Validation of bcrypt was a custom program, as nothing existing would be feasible to run.