@thorsheim@BSidesLV In both cases, if you have a collision within the same color it is merge, if it is in two different colors, it is only a colision. So they have the same coverage. But the rainbow table needs half as many hashes in the worst case and even much less if you're aiming for high prob
@smetille@derBeauftragte Très souvent les données son seulement chiffrées au repos. Si les attaquants ont eu accès au compte d'une personne ayant accès aux fichiers, les fichiers auront été déchiffrés automatiquement par le système.
I am the only one to think that the real issue is Windows using an unsalted, single-round hash in 2023. With salt, it would have taken 18k longer to crack 18k passwords. 5k rounds like Linux or MacOS makes it another 5k times slower, 90 million times slower in total
@jmgosney@Sc00bzT@Evil_Mog @godacity_ @TinkerSec@strategy_rpg@seventhsec For the example above (8 char NTLM) ,it takes one minute to crack the password with 2.5TB of rainbow tables on SSD and 48 CPU threads. The RT stores 0.0004 bytes per password.
We have finally published Tproxy (https://t.co/ECXoklDR0B) our generic TCP interception proxy (think Burp for TCP): TLS handling, wireshark dissection, intercept and modify by hand or with scripts in GUI or CLI.
There is a complete doc with demos (https://t.co/wJ7lrHC8L4)
@veorq Reminds me of the day I learned that generation parameters are often stored in private keys to make calculations more efficient. Then you can get the public key from the private key and can't swap the roles of the private and public keys. Reality is not like text book crypto.
@MjHillEditor ..and they only work for unsalted hashes, which no sane system uses anymore. OTOH, our online demo https://t.co/mPF6Xme069 cracks 8char windows passwords in 60s avg on a dual proc server. This is equivalent to about 200 dual RTX3090, so we got that going for RT, which is nice.
@MjHillEditor Do not hesitate do DM me if you have any questions about Rainbow tables. The biggest limitations are that the effort is linear in the number of hashes to crack, that they crack a fixed set of passwords and that you can't benefit from GPU because of the large amount of data
@thorsheim@abditum@kennwhite@hashcat Having said that, I also use hashcat as soon as there are more than a dozen hashes and for dictionary based attacks.
@thorsheim@abditum@kennwhite@hashcat The death of RT has been greatly exaggerated. Our online demo still cracks 8 MixedCaseSpecialChars in 60 seconds average on two CPUs. How many GPUs would you need for this?