POSITIVE HACK DAYS

ORGANIZER

Statistics

Statistics

Plaintexts and rules

Writeups

Statistics for PHDays 2012 Hash Runner challenge

Team progress in time

Team progress (Top 10)

Team progress (Cracked hashes)

Team progress (Cracked hashes - Top 10)

Hashes cracked by all contestants

Teams cracked most hashes by type

Top five teams hashes cracked

teardrop

InsidePro Team 2012

Xanadrel

john-users

xyzxyz

Plaintexts and rules

File format of plaintext, hash and etc.:

<type>:<hash>:<salt>:<ratio_w>:<ratio_r>:<base>:<plaintext>:<weight>

ratio_w - original wordlist compexity

ratio_r - complexity of rule applied to wordlist

base - base points for hash type

weight - final points for given hash

Download it here.

Sum of wordlist and rule complexity gives the percent of base points:

k = [1 : 50%, 2 : 75%, 3 : 100%, 4 : 125%, 5 : 150%]

(ratio_w + ratio_r) = kx

weight = (base / 100) * kx

Notes:

- DCC2 hashes has empty ratios as there complexity was precalculated;

- NTLM case/length conversion were handled by checking script;

- case/length conversion for Oracle hashes were added during May, 30 (thanks InsidePro Team for report);

- wordlist for DES was generated separately and is build of fully randomized all-case-alpha-numeric-special;

- empty or equal salts and empty usernames were introduced to compensate point values between some hash types, where cracking speed differed to much.

Wordlists for rules:

<Contents>, <ratio_w>

Names, 1

Words from different languages, 2

List of theological demons, 3

Wordlists without rules (ratio_r is not added):

<Contents>, <ratio_w>

[a-z] length 5-7, 1

[a-zA-Z] length 5-7, 2

[a-zA-Z0-9] lenght 5-7, 3

[a-zA-Z0-9] + special chars, length 5-7, 4

[a-z] lenght 8-9, 2

[a-zA-Z] length 8-9, 3

[a-zA-Z0-9] length 8-9, 4

[a-zA-Z0-9] + special chars 8-9, 5

One-char repeated 256 times, 4

Fibonacci numbers, 3

Dates in different formats, 2

Rules:

<Rule>, <ratio_r>

<word> + <year>, 0

l33t(<word>), 1

concat(<word>, <word>), 0

<word> + <number>[1-5], 0

<special_char>[1-2] + <word> + <special_char>[1-2], 1

<number>[1-5] + <word>, 0

<number>[1-5] + <word> + <number>[1-5], 1

<word> + <special_char>[1-4], 1

<special_char>[1-4] + <word>, 1

<word> + <number>[1-6] + <word>, 1

<word> + <number>[1-3] + <special_char>, 1

<word> + <date>, 1

Writeups

1st Teardrop

2nd InsidePro Team 2012

3rd Xanadrel

Feedback is welcome at hashrunner@ptsecurity.com