best64.rule contest

[atom]

Just thinking... Should we do a new best64 contest or maybe just 30 rules or maybe 100? Do we need to make it entirely different?

[coolbry95]

I think there should be another contest!!

[epixoip]

I'm in favor of a new contest, but it should be against a larger corpus of non-uniqued hashes from multiple sources.

best30 & best100 makes sense, but only as long as best30 is simply the top30 rules from best100. So you'd run best30 against slow hashes, and the full best100 against fast hashes.

[Xanadrel]

yes and agreed with @epixoip

[ati6990]

why not make a double ? best120.rule , best30 will be only a smal piece of best64 and makes no sense for slow algos.

[Kgx Pnqvhm]

Wouldn't some of these "best rules" already be in the various rule sets already distributed with the hashcats?

[rsberzerker]

I vote yes to this too. And as to Kgx's question, probably, but so what? Passwords used change over time, and the rules need to be updated against them.

[Rolf]

How about best 512, sorted by efficiency?
This way the list can be cut to suit any needs and still remain efficient.
2 cents.

[atom]

FYI, the reason for the initial best64 was to generate enough material that, when used as an amplifier for fast hashes, it's nearly as fast as the theoretical maximum performance. Of course this totally changed in comparison to the currentl oclHashcat version.

Sorting by occurance, or by efficiency, is some idea that I really like. The dive.rule or the generated*.rule are ordered the same way. However from what I've seen people don't do this kind of stuff. It's the opposite they even do stuff like $ cat rules/* > all.rule

If the goal for the challenge is to find the best XX for slow hash processing we'd typically end up with the usual suspects like $1, $1$2$3 etc. I mean, this propably makes sense as those are really the best rules but maybe not what we are looking for.

Finally the more important question than the one how many rules we want is how we do it and which reference hashes we use.

[undeath]

Finally the more important question than the one how many rules we want is how we do it and which reference hashes we use.

The last contest lead to rather dump-specific results. I think the new one should have at least three different wordlists.

rockyou and linkedin seem to be good targets.