29,013,076 MD5

[legion]

29,013,076 MD5

i made this md5 list from some passwords that i have cracked in 2012 from various sources.
these are real passwords and not a generated list

i have posted this list for you to test your wordlists/rules/brute attacks
there is no need to post found passwords but would be interesting if you
can post how many you find and attack or rules used

password lengths are min 7 max 15

i had to split list into 2 parts for upload

part1
http://www.multiupload.nl/7VKBTGFGX9 password = insidepro

part2
http://www.multiupload.nl/3Z1AEG43EF password = insidepro

have fun

[Waffle]

legion

Thank you - is fun! On first pass, using standard dictionaries plus my own, and with a simple ruleset (cap, reverse, double, add 0-9), I got 12,721,038.

I'll try Hash-it's rules later this week.

I appreciate you posting this.

[myslowtech]

Note:
after approximately 2 hours download and unzip

John the ripper wouldnt load any of the hashes since all were in uppercase.

fix was to do this.

[myslowtech]

used 5 wordlists and built in John the ripper word mangling rules
there are others to try later. here are results

started 8.6% already solved in pot.

f1.txt
rockyou.txt --rules guesses: 571736
eNtr0pY_ALL_sort_uniq.dic --rules guesses: 6643609
M3G_THI_CTH_WORDLIST_CLEANED.txt --rules guesses: 141132
facebook-lastnames.txt --rules guesses: 29002
facebook-firstnames.txt --rules guesses: 12989

f2.txt
rockyou.txt --rules guesses: 655528
eNtr0pY_ALL_sort_uniq.dic --rules guesses: 3736325
M3G_THI_CTH_WORDLIST_CLEANED.txt --rules guesses: 261327
facebook-lastnames.txt --rules guesses: 27692
facebook-firstnames.txt --rules guesses: 13608

so far solved 50.3 % of this hashset

the unsolved left has been merged into one file of 14418630 entries

[candid]

i split the lists in 8 parts (I have Flinstone's computer).
under 5% success rate, but the list is very nice.
I'll make lists and new rules.

thank you, Légionnaire Étranger!

[myslowtech]

using megatron-1 rule set

merged file
facebook-firstnames.txt --rules=megatron-1 guesses: 860230
facebook-lastnames.txt --rules=megatron-1 guesses: 208127
rockyou.txt --rules=megatron-1 guesses: 1479187
M3G_THI_CTH_WORDLIST_CLEANED.txt --rules=megatron-1 guesses: 722961
eNtr0pY_ALL_sort_uniq.dic --rules=megatron-1 **** 44% done 1508451

still need to complete the last run and try the megatron-2 ruleset

should be around 66% of hashset done now
also will try same mangling rules on solved wordlist.

time 10-11 hours approx so far

[myslowtech]

finished
eNtr0pY_ALL_sort_uniq.dic --rules=megatron-1 guesses: 2019964

2 more runs
facebook-firstnames.txt --rules=megatron-2 guesses: 94421
facebook-lastnames.txt --rules=megatron-2 guesses: 35465

Remaining 8998134 password hashes
solved approx 69%

more runs later

[myslowtech]

eNtr0pY_ALL_sort_uniq.dic --rules=megatron-2 guesses:68K *** power outage
M3G_THI_CTH_WORDLIST_CLEANED.txt --rules=megatron-2 guesses: 52396

[myslowtech]

downloaded some more wordlists from websites
additional runs coming - partial results

rootkit.dic --rules guesses: 11
rootkit.dic --rules=megatron-1 guesses: 5
rootkit.dic --rules=megatron-2 guesses: 161
mayhem.dic --rules guesses: 69
mayhem.dic --rules=megatron-1 guesses: 302
mayhem.dic --rules=megatron-2 guesses: 39
gawker.dic --rules guesses: 126
gawker.dic --rules=megatron-1 guesses: 145
gawker.dic --rules=megatron-2 guesses: 1463
bkav-1.dic --rules guesses: 48
bkav-1.dic --rules=megatron-1 guesses: 46
bkav-1.dic --rules=megatron-2 guesses: 23
bkav-2.dic --rules guesses: 10
bkav-2.dic --rules=megatron-1 guesses: 30
bkav-2.dic --rules=megatron-2 guesses: 13
eharmony.dic --rules guesses: 2691
eharmony.dic --rules=megatron-1 guesses: 251
eharmony.dic --rules=megatron-2 guesses: 5
gamigo.dic --rules guesses: 1152
gamigo.dic --rules=megatron-1 guesses: 535
gamigo.dic --rules=megatron-2 guesses: 8

[Waffle]

For what it is worth, I'm having quite a lot of success with this rule I wrote. I took my already-cracked wordlist for the list (~22million words), and used that as input... it turns out to be quite useful on a lot of lists - maybe someone else might benefit from it.

[myslowtech]

more runs completed with others left

linked.dic --rules gueses: 486
linked.dic --rules gueses: 79
linked.dic --rules guesses: 0
opisreal.dic --rules guesses: 27
opisreal.dic --rules=megatron-1 guesses: 32
opisreal.dic --rules=megatron-2 guesses: 9
KeyboardCombo3.dic --rules guesses: 0
KeyboardCombo3.dic --rules=megatron-1 guesses: 24
KeyboardCombo3.dic --rules=megatron-2 guesses: 0
KeyboardCombo4.dic --rules guesses: 8
KeyboardCombo4.dic --rules=megatron-1 guesses: 384
KeyboardCombo4.dic --rules=megatron-2 guesses: 177
length06.dic --rules 77
length06.dic --rules=megatron-1 306
length06.dic --rules=megatron-2 489
length07.dic --rules 123
length07.dic --rules=megatron-1 608
length07.dic --rules=megatron-2 492
length08-from-pot.dic --rules 38
length08-from-pot.dic --rules=megatron-1 82
length08-from-pot.dic --rules=megatron-2 72
length09-from-pot.dic --rules 382
length09-from-pot.dic --rules=megatron-1 518
length09-from-pot.dic --rules=megatron-2 102
length10-from-pot.dic --rules 279
length10-from-pot.dic --rules=megatron-1 377
length10-from-pot.dic --rules=megatron-2 34
stratfor.dic --rules 0
stratfor.dic --rules=megatron-1 8
stratfor.dic --rules=megatron-2 2
password.dic --rules 27
password.dic --rules=megatron-1 35
password.dic --rules=megatron-2 1
wikipedia-wordlist-sraveau-20090325.txt --rules guesses: 52955

[myslowtech]

new runs completed

wikipedia-wordlist-sraveau-20090325.txt --rules=megatron-1 guesses: 381354
wikipedia-wordlist-sraveau-20090325.txt --rules=megatron-2
paused at 30% found amt around 16K to try next run

wordlist is approx 34 million results from my john.pot for all hash types - sorted with any dupes removed

wordlist --rules guesses: 80939
wordlist --rules=megatron-1 guesses: 656099

7509430 hashes left
solved approx 75%

[myslowtech]

wordlist --rules=megatron-2
paused at 54% 35K found

try new run pull off 2 million finds from end of john.pot
mostly new word mangling results from previous run and some online hashsets

wordlist2 --rules 4984
wordlist2 --rules=megatron-1 guesses: 62745
wordlist2 --rules=megatron-2 guesses: 2776

use my python script posted earlier to expand wordlist2
into shorter strings by pulling off end and/or beginning characters
until a min length is reached
sorted and removed any dupes.

wordlist3 --rules guesses: 10609
wordlist3 --rules guesses: 287388
wordlist3 --rules=megatron-2 guesses: 178276

next just see what happens if try changing case of words as well.

also will iterate this with smaller size sets for these new finds until no new results are found

[myslowtech]

new list with last 1/2 million finds in pot

wordlist4 --rules 4797
wordlist4 --rules=megatron-1 30002
wordlist4 --rules=megatron-2 1233

[myslowtech]

36534 found with iterations of various wrdlists.
converting a list to lowercase before word mangling did allow for some new finds.

some runs with website wordlists and wordmangling rulesets
dates.pwl 50
hak5.txt 14
honeynet.txt 1397
hotmail.txt 74
elitehacker.txt 2
faithwriters.txt 56
blackstar.pass 46
carders.cc.txt 0
alypaa.txt 367

wordlist I made comprised of merged smaller 3-4 length words.
4n3wl.pwl 17537

download 4n3wl.pwl in approx 9MB rar file here
http://www.sendspace.com/file/h3zw4c