CMIYC 2013
#1
Congratulation to Hashcat for your second place. I know it happened already a while ago but I wanted to post only when the write up would be published. I am sure you are curious about it so here's the link:

http://contest-2013.korelogic.com/team_InsidePro.html
#2
When will we see team hashcat's write up?
And maybe some new rules?
#3
Hey mastercracker, congrats to your first place! Your writeup is great I enjoyed reading it.

@Kgx: We're still assembling all team-mates writeups
#4
Hey everyone. I am trying to reproduce the cracking of this year's challenges so that I am better prepared for next year (assuming that Korelogic will do another contest). Right now, I am working on Challenge 2 (OSX 10.8 hashes) and Challenge 9 (pfx file). I am trying not to waste too much time on this so if anyone is willing to give me a hand by either disclosing the passwords they got for theses challenges and/or crack a couple, it would be great.

To atom/mods: If you think that this is improper for this part of the forum, let me know and erase this post but I think that this could be beneficial to your team too.
#5
i wasn't able to crack any of the osx 10.8 hashes, although i didn't spend a lot of time on them since there were worth so little points. i was the first to crack the street challenge 9 though ;-) the password was at the bottom of the rockyou wordlist. it took me around 4hrs on a i5 3750k
#6
(08-27-2013, 08:58 AM)forumhero Wrote: i wasn't able to crack any of the osx 10.8 hashes, although i didn't spend a lot of time on them since there were worth so little points. i was the first to crack the street challenge 9 though ;-) the password was at the bottom of the rockyou wordlist. it took me around 4hrs on a i5 3750k
I am looking for the pro challenge. I have been doing incremental attack on JTR for more than 6 days without hits. I tried a couple of wordlist before without success either.
#7
what do people use for cracking .pgp files? i always have a tough time with those. tried gpg2john, gpg, and gpg-zip but none of them seemed to work. i used pgp desktop to extract the password and challenge but it doesn't allow me to feed a wordlist to it.
#8
(09-06-2013, 07:36 AM)forumhero Wrote: what do people use for cracking .pgp files? i always have a tough time with those. tried gpg2john, gpg, and gpg-zip but none of them seemed to work. i used pgp desktop to extract the password and challenge but it doesn't allow me to feed a wordlist to it.

https://github.com/kholia/PGPCrack-NG/ works (it is just stripped down GnuPG for now).
#9
(09-06-2013, 11:52 AM)halfie Wrote:
(09-06-2013, 07:36 AM)forumhero Wrote: what do people use for cracking .pgp files? i always have a tough time with those. tried gpg2john, gpg, and gpg-zip but none of them seemed to work. i used pgp desktop to extract the password and challenge but it doesn't allow me to feed a wordlist to it.

https://github.com/kholia/PGPCrack-NG/ works (it is just stripped down GnuPG for now).

thx!
getting errors compiling. instructions say I might need to edit
-I/usr/include/libassuan2
but edit it to what?
#10
@forumhero, please use https://github.com/kholia/PGPCrack-NG/issues to file a bug (and give enough details and exact errors you are getting).