rockyou replacement imminent?
#1
Just spotted this: http://cynosureprime.blogspot.se/2015/09...shley.html

11.2 million passwords recovered so far - would be a nice addition to anyone's wordlist collection (not that I'll ever manage to get my hands on it... Smile

I wonder did they use hashcat for the md5($salt.$pass) part?
#2
Certainly won't be a replacement for rockyou, rockyou was 32 million. But good stats nonetheless. Will be good to correlate non-uniq between both.
#3
(09-10-2015, 03:52 PM)rico Wrote: Just spotted this: http://cynosureprime.blogspot.se/2015/09...shley.html

11.2 million passwords recovered so far - would be a nice addition to anyone's wordlist collection (not that I'll ever manage to get my hands on it... Smile

I wonder did they use hashcat for the md5($salt.$pass) part?


We used MDXfind for the first finds.  Later, we reformatted the files so we could use oclhashcat as well.  We did not use hashcat.  oclhashcat cannot find MD5AM2 yet, and appears to have some limits on what we could use for MD5AM .

Validation of bcrypt was a custom program, as nothing existing would be feasible to run.
#4
That's some fine work, Waffle. Bet it was fun as hell too.

Well done to you all.
#5
yep ... should see how much is left after cleaning of copy, random & allready known(ex:rockyou)

but nonethless GREAT WORK !