Andronicus

Security Projects, Research, and Linux

  • Home
  • My Projects
  • Home
  • My Projects

Category: Credential Research

160M NTLM Hashes & Intro to Metasploit Progress

2018-02-10Credential Research, MetasploitNo Comments

This hashing project could probably use a sponsor.  My hardware is taking quite awhile to generate the hashes.  It’s been hashing for just over a week, and we’re at about 160M NTLM hashes.  At that rate, it’ll be finished in […]

73.2M Hashes and Metasploit for Beginners

2018-02-052018-02-05Credential Research, Metasploit, NewsNo Comments

The BreachCompilation database weighs in at 1.4 Billion records.  Out of that, there are about 400 Million unique passwords.  That is a lot of password reuse.  The goal right now is to create NTLM hashes for those 400M passwords.  This […]

400 Million NTLM Hashes

2018-02-02Credential ResearchNo Comments

Analyzing the BreachCompilation database, my first goal was to count how many times each unique password showed up in the data.  As it turns out, there are approximately 400 Million unique passwords.  The top 1 Million most common passwords and […]

BreachCompilation Update

2018-01-31Credential ResearchNo Comments

The results are in.  The 1 Million most common passwords are now available.  I’ve included the count of how many times each one occurred in the 1.3 Billion records originally imported.  Folks have asked how this word list would compare […]

BreachCompilation Analysis

2018-01-302018-01-30Credential ResearchNo Comments

Database dumps containing user credentials are not a new thing.  One of the more recent contains 1.4 Billion email addresses and passwords.  This database is referred to as “BreachCompilation.”  More information about this database can be found at the end […]

Posts navigation

1 2

Recent Posts

  • Guide to SSH Lockdown
  • DefCon Resources
  • Automate Patching/Rolling Reboot
  • Data Breaches and You
  • Defend Against This

Recent Comments

  • Andronicus on Defend Against This
  • ann_on on Defend Against This
  • Andronicus on The Easiest Metasploit Guide You’ll Ever Read
  • Matt on The Easiest Metasploit Guide You’ll Ever Read

Archives

  • April 2020
  • June 2019
  • May 2019
  • June 2018
  • April 2018
  • March 2018
  • February 2018
  • January 2018

Categories

  • Authentication Factors
  • Bash Script
  • Capture the Flag
  • Ciphertext Analysis
  • Credential Research
  • DefCon
  • How-To
  • Metasploit
  • News
  • Pros vs Joes
  • Security
  • ssh

Meta

  • Log in
  • Entries feed
  • Comments feed
  • WordPress.org
Proudly powered by WordPress | Theme: Doo by ThemeVS.