Many password crackers have their go-to lists of wordlists which they use time and time again due to the fact that they have the highest success rate for numerous leaks; I am no different but I was surprised to find out that it’s rare for many password crackers to create custom charset files for lists [...]
Here’s my list of Top 100 Passwords of 2012. Note that there are only 99 since the most common password with 24424 hits was blank…
After speaking with @Solardiz over twitter yesterday I’ve decided to share this little tweak to John the Ripper which can help to import larger pot files without having to wait for years for it to load up.
As a password cracker, I not only know the importance of having a large .pot file, I have quite a large .pot file which has been accumulated over quite some time cracking passwords. Recently I noticed my password cracker taking forever to load up. This article will describe the process I used to not only speed up start up but also the way I’m currently managing my .pot file.
Recently I decided I would contribute to the growing number of twitter scraping tools such as twofi and whatever Joshua Dustin over at “7 habits of highly effective hackers” calls his twitter scraping tool . In my rendition of twitter scrapping I’ve created a script which visits Twitter, scrapes current trending topics, and then goes ahead and scrapes tweets using the trending topics as search keywords.
One of my favorite past-times is cracking password hashes and seeing just how insecure many website and organization password policies really are. In this post I will be sharing a list of passwords which are all real cracked password from the last few months but with a more secure twist.
I work in IT a large corporation, and one thing that I deal with on a daily basis is password troubleshooting. Be it passwords expiring, so they need me to reset it for them, or data recovery where I need the users password to configure a replacement hard drive for them, I deal with users passwords on a Daily basis.
I was skimming through twitter this morning when a post by the Pentestit.com blog was RT’d by one of the people I’m following. The post was about using nmap to crack passwords for stuff like OpenVAS, NeXpose, etc.