Chris

Red teamer, hash muncher, hacker. (Team Cynosure Prime) Powered by promises we won't get past security :)

[Chris @golem445]

@techspence Every domain computer's machine password was the computers name

[CynoSure Prime @CynoPrime]

Tired of your password rules being half-baked?
The CsP kitchen’s been cooking up something better.
RuleChef serves Markov-seasoned rules that actually make sense.
No more recipe-for-disaster rule sets.
https://t.co/t2UHVtDbpj

[Chris @golem445]

@FreeRangeLawyer Good stuff! Watching the government repeatedly cite the “unusual nature” of the case while simultaneously suggesting it could affect “ordinary cases” is humorous. Heaven forbid other cases hinging on 4th amendment violating searches be affected.

[CynoSure Prime @CynoPrime]

We just posted our 2023 @CrackMeIfYouCan write-up.

https://t.co/w8BrICNSOs

[KoreLogic @CrackMeIfYouCan]

CMIYC 2023 coming soon to DEF CON and an Internet near you! https://t.co/60AtF8E8a0

In the next couple weeks we'll open preregistration and release test hashes that are equal parts hint and misdirection.

[CynoSure Prime @CynoPrime]

#crackthecon starts in about 48 hours! If you have not registered yet better get registered soon. Testing will end tomorrow! Head over to https://t.co/XoBvc7paYR to register. Cannot wait to see some of you @CypherCon

[Chris @golem445]

@offsectraining The plundering of a respected organizations reputation for blatant profiteering is a wretched sight. The new offsec is about cutting costs to the bone, subscriptions and courting corporate consumers. Can’t even get a paper certificate saying “congrats” anymore.

[Chris @golem445]

@offsectraining "In fact, our certification business is managed as a community service, not as a profit generator."
Curious how a "community service" can be so grossly expensive. Anyone can see prices before and after your new CEO, you should be ashamed at such blatant dishonesty.

[KoreLogic @CrackMeIfYouCan]

Pentesters, KoreLogic is happy to release WMKick . A Responder-like tool for capturing NetNTLMv2s for Powershell and WMI ports. Details here https://t.co/YpWL6elEyu #password #hashes #pentest

[CynoSure Prime @CynoPrime]

Our KoreLogic's @CrackMeIfYouCan 2021 write-up is live come take a look. https://t.co/RpMAsRRYeB

@hashcat @john_users @defcon

[hashcat @hashcat]

Another great @CrackMeIfYouCan and another win for Team Hashcat! @CynoPrime put up quite the fight, well played by all teams. Huge thank you to KoreLogic for hosting the @defcon @PasswordVillage and keeping this contest running for so many years, hopefully with many more to come.

[Chris @golem445]

@tr0ntastic @CrackMeIfYouCan @nyxgeek @Bandrel @BrewCrewTim @IT_Krieger @john_users Good showing! My first time I prayed the same thing haha

[Dominic White 👾 @singe]

🎉We're super excited to publicly release assless-chaps, our super fast MSCHAPv2 cracking tool https://t.co/R46ZFwhdRI

Our DEF CON @rfhackers Village talk with @_cablethief & me explaining it is out https://t.co/6WVWWQ5wzD

Our new hashcat modes 27000/27100 have been merged too!

[Chris @golem445]

Excited for this years competition! If you want to jump in but not quite ready to battle Cynosureprime, Hashcat or John, there’s good competition in the “Street” league as well

[KoreLogic @CrackMeIfYouCan]

Registration for @CrackMeIfYouCan - the premiere password cracking contest @DEFCON is now open.

https://t.co/iuYD6yIm8y

@PasswordVillage

[Chris @golem445]

3070ti hashcat bench, speeds appear a slight improvement over 3070's.
https://t.co/wKypplFfmp

[Kevin Robertson @kevin_robertson]

[New Release] Inveigh 2.0: Rebuilt for C#, cross-platform (Windows, Linux, macOS), new listeners (SMB, LDAP, WebDAV, HTTPS), improved interactive console (tab complete, real time stats). https://t.co/drlzVj4R24

[Chris @golem445]

@GlennPegden We’re also assuming joe bloggs knows beforehand the password is 15 characters. Chances are zero he’d even attempt a brute force that high from the get go.

[Chris @golem445]

@Chick3nman512 @hashcat @NVIDIAGeForce @TychoTithonus Didn’t think LHR would affect cracking, but feel better hearing some confirmation before trying to purchase

[Chris @golem445]

Holy crap, nice bumps

[hashcat @hashcat]

Improved performance of the following hash-modes by reducing shared memory bank conflicts: bcrypt 9.4%, Kerberos 5 (etype 23) 45.5%, MS Office (<= 2003) 67.1%, PDF (<= 1.6) 70.9%. Thanks to @Sc00bzT for inspiration!

[Chris @golem445]

@0xValkyrie @Carlos_Perez Taiwan has an actually elected president, government, military, economy, stock market, passports, currency, unique culture etc but its “not a country?” Lol what a joke