16 Systems ®
DocumentationMiscSoftware
Contact
All Rights Reserved.
16Crack - Crack Me If
You Can
16Crack participated in the DEFCON 2010 'Crack Me If You Can' password cracking contest which was sponsored by KoreLogic. The team consisted of one person with one six core CPU (AMD 1090T) running 16Crack. According to the final results, 16Crack placed toward the lower/middle of the teams scoring 3,753 points. The winning team (hashcat) scored roughly 38,000 points.
- Here is the list of NT passwords that 16Crack got (during the contest) using CVSN patterns.
- Here is a list of NT passwords that 16Crack got (after the contest) using a few mangling patterns and a 3,000 word dictionary.
Notes - Passwords in the official contest list longer than 5 chars were cracked by CVSN pattern matching. Competing teams used hundreds of CPU cores and multiple high-end GPU cards. So this was not an evenly matched contest... not complaining, just stating facts.
Lessons learned - While consonant, vowel, number patterns are a valid approach to password cracking, having multiple approaches (brutes, dictionaries, mangling, etc.) is the most successful. Hashcat seems to be the best free password cracker in use today and JTR is still an awesome hash cracker.