16Crack - Crack Me If You Can 2011

2011-8-07

16Crack cracked 50,431 passwords (KoreLogic counts this as 51,768... not sure why) in roughly 30 hours of cracking. Here are the cracked passwords. Here are the discovered words. I'm pleased by 16Crack's performance. Only four teams cracked more hashes than I did so 16Crack placed 5th in terms of sheer number of cracks (although I was not ranked that high because of the weighted scoring system). Not bad for a one man team with one CPU using homemade software.

2011-8-04 1:03 PM US Eastern Time

In addition to competing as a one man team with 16Crack (not counting my friend **JPD who is attending Defcon) I'll be contributing 16Crack cracked passwords and discovered words to the john-users team. I doubt they'll need my contributions, but I want to support them as they provide the best, free, general purpose password cracker available today... and they tolerate me on their mailing lists ;).

**JPD's only involvement will be sending me the registration code.

2011-7-28

Picture of 16Crack July 2011

2011-7-10

Here are 15,000+ cracked passwords from last year's NT hashes. 16Crack did this over the weekend in just less than 40 hours averaging 380 cracks an hour.

2011-7-8

Here's a screenshot showing 16crack using all six cores 600%.

2011-7-2

I plan to participate in the DEFCON Crack Me If You Can password cracking contest again this year. The contest is sponsored by Korelogic.

I hope to place better than I did last year finished 13th out of 18 teams with 3,753 points. I will be a one man team again this year. I will be using 16Crack (software that I wrote for consonant vowel pattern cracking) running on one AMD CPU that has six cores. 16Crack uses Boost threads, so all six cores will be cracking hashes.

Assuming similar hashes this year, to win against the top teams (10+ team members with enormous processing power), I need to average about 850 cracks per hour for 47 hours. There's no other pace that will beat their HPC clusters and multiple high-end GPUs. To be competitive, I need to average about 600 cracks an hour. I may be competitive this year, not sure. Two things I can guarantee though...
  1. I'll use far less energy than they do.
  2. I'll have a better score this year (I had time to tweak 16Crack this weekend).
I don't expect to win, but it will be fun. If you have any interest in password cracking, join one of the teams, or form your own. I will update this page as things unfold. I'll also post more cracked passwords from last year.