start	end	text
40530	46570	All right, let's see what we can do here. So we're gonna
48470	57650	crack RokU without using RokU. So all I did was took the RokU dictionary,
58210	66450	piped it through MD5, so we have a big-ass list of MD5 hashes now, and let's see what we can do.
147520	153940	Looks like we lost a few hashes in the conversion, but I think we'll be all right.
163320	167360	All right, so most basic, let's do a hashcat
174890	180730	RokU.hash. We'll do tach E3 and let's just do
183230	188470	five character. So this will do
190310	195630	all character classes for five positions, but we're going to start doing one,
195630	199710	and then we'll do two, and then we'll do three, then we'll do four, then we'll do five. So that's
199710	260540	what this increment flag does. So that is one, two, three, four, five. I think we're doing okay.
284690	304480	All right, almost 300,000 in 27 seconds. Why not? So let's try...
307080	319340	We need to grab... We don't have anything. We can't do a wiki strip, that would take too long.
323580	330500	Let's see if we can find a dictionary. Something small.
333760	343220	Let's try, like, all words of 10 letters, and we want that in a text file.
374010	395860	Can't I just have a dictionary? We have...
413070	421890	Oh yeah, good point. We could use ASPEL, that's true. Let's grab wiki strip because we can use it
423290	506640	regardless. And then, do we have ASPEL? Where do ASPEL's dicts go? There we go.
507000	510820	So I'm guessing we could probably use the
513340	578810	ENUS. Let's do that one. Yeah, maybe that's not a good one. Maybe without accents?
580270	583970	I don't think that one's even gonna... That one's gonna matter.
586190	588110	Let's instead... Let's go grab...
603470	609290	There we go. Let's grab this one.
620090	624390	Some random list of words off of GitHub, this ought to be interesting.
628260	638260	So we're gonna do rocku.hash, and then feed it words.txt, and let's see what we get.
639040	641300	Actually, let's look at what these even look like.
646800	649300	Yeah, this'll work.
680690	686090	Okay, actually, it wasn't terrible, so that's good. Let's try doing...
687910	692730	Let's do an A6 and see what we get. And we'll just add...
694110	698370	Let's just add two digits. No, let's just add... Yeah, let's do two digits,
698370	706370	and then let's also increment. So we exhaust both of those. Oops, that's gonna fail.
706370	764810	But yeah, I mean, I guess that works.
768370	771530	We got 2% just off of that. All right, all right.
774320	781680	What if we do... If we already incremented two spaces, let's not run that again. Let's do...
785240	790020	Well, let's just do like... What year did this come out? 2009, right? So let's do 2008.
812930	817290	Oh, we're gonna have to trim this hash file too, because these load times are a bit ridiculous.
834200	841920	All right, so not a whole lot of 2008 passwords. Let's... We're gonna add remove.
844000	847300	And we're also gonna do an out file. We don't need to do an out file,
847300	849800	because we can do a pop file. So what this is gonna do is...
849800	855600	So we're gonna take all these words that are in words.txt. We're gonna add 2009 to it.
855600	864760	Actually, let's just do... Let's do 2000 digit, digit. So that should cover everything from 0,
864760	869680	0 to 99. And then we're gonna remove everything that we cracked, because it's gonna go in our
869680	873320	pop file anyway. And then after that, we'll roll our pop file back and we'll try some
874320	926950	rule-based attacks. So we've only got 13,700,000 more hashes to crack. Not a lot.
927910	938270	Let's do a cut-d, attack-f2-on from hashcat.popfile. And we're gonna put that to
941110	954720	pop.dict. And then let's roll... Instead of doing an A6, let's just do generated rules.
957680	961120	And let's do like... Let's do like 5,000 of them.
971180	974300	We'll move that removed so we don't have to keep doing it every time we want to change a command
974300	1012420	line or a run line. Probably should have suppressed output. This is... Get hit status,
1012420	1084800	but we're not gonna see anything. We're up over a million now. So that...
1084800	1091980	That got us almost 11%. No, 8... 9%. Almost 9%. It's pretty good.
1093620	1098680	And the great thing is, is that if we do that again, we're gonna get a bunch more. But this
1098680	1106960	time we're gonna write this... We'll start writing this out to a file so we don't slow down at all.
1108400	1122850	w... We'll call this rocku.out. It's not w, it's tacho.
1137640	1142940	This load time's a little bit ridiculous. I think we'll manage. Let's just see what
1142940	1152660	our GPU is doing as well. So down here we'll do like a watchtech n5 nvidia smi.
1170970	1174850	So even for md5, because there's so many hashes, we're still only going at
1174950	1183350	what's that? 118... 118 million candidates per second, which is a little bit sad, but you know.
1187150	1195150	So we got 278,000 on that one, or 288,000. So if we do it again,
1195150	1198670	we'll get even more. So you just sit here and you loop this attack.
1215240	1219580	I think after this one we'll just do maybe just an uppercase. I don't know. If you have...
1219580	1222840	If you have an idea, tell me what you want to try in the chat,
1222840	1258480	and we'll give it a shot and see how many you get. All right, so let's try...
1261520	1264360	Let's try just uppercasing everything.
1301550	1306730	Wow, we got nothing. Probably because we already had an uppercase in our generated rules.
1308430	1319320	What else can we do? We could try doing some truncates. Let's actually do this.
1319340	1325120	No, no, we'll just do the truncate first. So we'll just take one character off the
1325980	1331080	right side of the plain text and see what happens.
1332600	1335340	Normally this is really good if you have a word list that already has
1339640	1345480	years on the end of it. So if you've already cracked hashes and somebody's using password
1345480	1352040	2019 and then they use password 2020, you trim one to two positions off and then you fill that
1352040	1358780	with digits and get back to it. All right, so let's roll our cracks, because I forgot to do
1358780	1392700	this. We'll roll our cracks back into our word list. I already forgot what I called it. Pot.dict.
1397740	1402860	And then because we started writing an out file, we're going to do the same thing for the out file.
1402860	1405780	Well, actually we don't need to do that.
1414160	1463020	Yeah, we don't need to do that. All right, so we're going to take from the left side,
1463020	1466520	or sorry, from the right side, using tack k, we're going to truncate the first two positions
1467480	1474060	of the word that's in pot.dict. And then we're going to try and run everything
1474740	1524000	for two positions and see what we get. Yep, that'll do it.
1603310	1629120	It was actually getting a lot more than I expected it would. All right, so we're, what,
1630940	1642110	10.48% in. We've only got a lot more to go. All right, so if we truncated two,
1642110	1647550	and it did really well, let's truncate three, but instead of adding something,
1647550	1655290	just keep it with the same two positions and see if maybe we can catch some stuff that doesn't have
1655290	1662990	that. This is a little brute force-y without actually doing a mask attack, but I mean,
1662990	1668570	it still kind of makes sense. If somebody prepended, for instance, numbers to a password,
1668570	1674950	if they start with their birth year or something at the beginning, we can strip those off and then
1674950	1704750	start replacing the first digit or the first character that comes after that. Yeah, see that?
1705210	1733050	We're still getting stuff. So one thing I keep seeing in here is there are a lot of passwords
1733050	1739810	that are just digits. So this would be, to me, tells me that I need to go and brute force all
1739810	1749990	of these, what is that, six, seven characters of digits. So after this one finishes, we'll see
1749990	1767850	if we can do that, because seven digits will be pretty quick. I mean, technically, we could
1767850	1773970	probably even go out to 12, but I don't know. We'll see what the runtime looks like.
1802120	1805580	All right, so we're going to strip all this stuff off, and then we're just going to say
1806540	1811640	A3, and we only want digits for, we'll say up to eight.
1814730	1818290	And because there were ones that were less than eight, we're going to increment this as well.
1820690	1825290	So we'll try one digit, then two digits, then three digits, then four digits.
1874050	1879970	All right, so that was pretty quick, and that got us, what, almost seven percent.
1879970	1884950	All right, so let's get rid of this increment, and let's do one more.
1887170	1892130	Actually, who cares? Let's just go until it's going to take too long.
1895960	1899480	So we're going to waste a little bit of time going over the things we already went over,
1899480	1903560	but it was fast enough that it shouldn't really matter too much.
1908930	1911290	I'm really going to keep getting faster as we keep cracking
1912330	1915530	hashes, because it's less workload to do comparisons against.
1925660	1931360	So what we should also see down here is our GPU memory is going to spike once the attack gets
1931360	1937800	going, because we've got all that stuff loaded into the video card's memory.
1967440	1974440	This is kind of a good example of why Rocky was bad in some ways. Like, it's good, but you could
1974440	1979480	trim all of this crap out, because it's going to be rare that you're ever going to see a password
1979480	1988120	that looks like this in a dump today or during a pen test or something. Like, if companies had
1988120	2102220	passwords that look like this, their building's probably on fire. Oh, 24% almost? I'll take it.
2116060	2119360	But this also means 24% of this dictionary is crap.
2180230	2184610	Right? So we're at... let's see what percent we're at so far.
2194640	2197000	So we're at almost 24%...
2200690	2214590	Sorry, almost 25%. Well, that's what? 14 divided by 4 is math?
2221230	2228310	So what these probably are are spammer passwords, though, or automated accounts. So in a lot of ways,
2228310	2235110	you know, like Twitter, for instance, or something... Reddit would be a good one. When you're
2235910	2241570	doing automated account stuff, you don't really care about the security of the account if all
2241570	2245970	you're going to do is sit there and upvote each other or, you know, do retweets or, you know,
2245970	2253490	maybe it's a Twitch bot or something like that. So these are likely... I don't know much about
2253490	2295150	the site other than the dictionary. I mean, it could be telephone numbers, but a five-digit
2295150	2313040	telephone number, like we did have a lot of fives. Six, even. Yep, that's true.
2314800	2322030	Asian countries where sometimes a sentence can be said in a string of numbers, sure.
2341060	2344840	I kind of want it to stop cracking so we can do something else.
2346720	2395660	But you know what? I'm gonna take them. What if... let's do... let's make a word list.
2401730	2418670	We'll just use cool again. That's easy. Don't tell DT. I'm gonna scrape Defcon.org.
2455070	2459150	So what are we doing? This is only... so this is only 12. Oh, this is gonna take 30 minutes.
2459150	2474990	I don't want to wait 30 minutes. We're only doing the default, so it's only gonna go
2476490	2480350	too deep. It won't spider too recursively.
2498720	2502300	All right, screw that. I'm tired of waiting. 31 minutes to finish. I don't want to sit around
2502300	2507820	for 31 minutes. Okay, but we're at 25%, so that's pretty good. What else can we do?
2509660	2513400	What if... oh, let's do the Pathwell masks.
2524140	2533240	And if you're not familiar with what the Pathwell masks are, we will discuss those tomorrow.
2539520	2547260	So this is the top 100 topologies that were observed in corporate networks.
2572190	2575890	Since we have a bunch of them, we'll just do this in a loop.
2579090	2629130	Yep, yep, A3 in the mask. And then we'll call it done. Come on, you can do it.
2630590	2635170	Okay. Looks like a pretty good result.
2660360	2668440	So this is all going to be the same structure. So you see we've got one upper. What's that? One,
2668440	2678980	two, three, four, five lowers and two digits. So that would be numbers. Six, eight characters.
2679280	2683780	So we're cracking eight character passwords in... what's our runtime?
2686400	2691340	Less than a minute. And the entire attack is going to complete in about a minute.
2710660	2713580	Oh, we're actually over 25% because we're missing...
2714420	2723220	what? 200 and... yeah, about 200,000 hashes out of this. Or no, we're missing like 3 million.
2723240	2729480	So we're way over 25% at this point. And we're only 40-45 minutes in.
2742410	2745910	So let's actually even... let's take pack.
2753690	2758350	And we'll run pack against our cracks and generate some rules and then run some rules
2758350	2787880	against our cracks and see what happens. Let's actually pause this for a second.
2809740	2815860	And what do we call this? pot.dict, I think. Yeah.
2817820	2821500	And we're going to sort this thing before we do this anyway. So let's do...
2821500	2828880	what was that out file? It's like... no, it wasn't hashcut, it was rocku.out.
2828880	2839820	We'll put those in there. And then we will do a sort techu.pot.dict to pot.sorted.
2842720	2850960	And then we'll move pot.sorted to pot.dict.
2853800	2856180	Such a lewd file name.
2859090	2866550	Okay. So let's go... we'll let this keep going. So we will resume this with R.
2870560	2876290	And then let's do... let's do mask... no, we don't want maskgen, we want rulegen.
2878640	2884660	So... uh-oh. I don't think pack is Python 3.
2888140	2893240	That doesn't look like it to me. We'll try it.
2895540	2897740	Yeah, I didn't think so. Okay.
2897740	2898120	So we're going to do...
2900940	2904420	app.cache.search.python2.
2940720	2943140	No module named enchant.
2943800	2950500	So probably the pip to install enchant.
2958680	2961100	We don't even have pip.
2964070	2965830	Oh no.
2966370	2968470	It's all going to hell.
2975800	2977160	What?
2989810	2994390	Python 2 doesn't have... that was pip.whl.
2994730	2996510	No, let's do it.
3008010	3010050	Yeah, it ain't there, man.
3011030	3019890	app.install.python.tack.pip.
3031790	3036110	We need to summon ifelix to port pack to Python 3.
3124540	3126700	What provides enchant now?
3145160	3147840	Python 3 enchant? No, Python 2 enchant.
3147840	3149660	What happens if we do that?
3172620	3174340	Oh, it's pyenchant.
3175480	3177160	Let me smart.
3189510	3191080	Enchant C library.
3191490	3192630	Okay.
3201480	3204320	lib enchant dove.
3215350	3222690	Yeah, it kind of looks like they may have pulled it, but we're working around it.
3225170	3226650	Where are we at?
3230400	3232980	Going slowly, but we're still going.
3232980	3233480	Okay.
3244010	3246170	Okay, we did it.
3247990	3249010	All right.
3249390	3263950	So we want to run statsgen on our dictionary.
3266170	3268530	So that was pot.dict.
3268950	3270810	We'll let it do its thing.
3297020	3299020	All right, so we've got...
3299020	3300560	So these aren't going to help us too much.
3300560	3301660	I mean, they might...
3301660	3307460	We could probably run these and get something out of them, but we're kind of unlikely to.
3310620	3315560	But that's a good example of extracting masks out of dumps that you...
3315560	3317480	Or not dumps, but cracks that you've done.
3317480	3322880	So we could take these right here and put them in a new file and then start running them.
3326080	3331600	But what I want to do is...
3333400	3334820	Do we have our analysis?
3335780	3337120	No, we don't.
3339600	3341400	Why do we not have our analysis?
3344590	3345990	No, because we didn't output them.
3345990	3346770	That's why.
3353320	3355280	So let's write that to masks.out.
3378610	3380910	All right, and then we'll feed that into maskgen.
3393830	3396070	I wonder what the math he based.
3396070	3400290	So that's on a billion per second.
3401770	3403370	I don't think we're going to be able to...
3404750	3407650	I don't think we're going to be able to cover that in this stream.
3412040	3413700	Let's do rulegen though.
3415560	3418020	And we'll just generate some rules.
3426320	3427580	Excuse me?
3458030	3462010	So how does that work for maskgen, but not for rulegen?
3462170	3466190	Or was it statsgen that failed before?
3466190	3467990	I don't even remember anymore.
3510210	3512890	I guess I just forgot to redo it.
3513790	3518790	Okay, so let's take a look at our options here.
3518790	3521230	We can make that a little bit smaller.
3526810	3529710	Take the defaults on everything.
3576880	3578460	We're going through pack.
3579320	3580480	Generating some rules.
3580480	3585540	We've cracked about, I want to say, close to 30% of Rocky right now
3585540	3593460	using nothing but masks, rules, and passwords that we've cracked from those.
3602820	3606520	Pack's going to take its sweet time because, you know...
3651560	3656200	So pack needs to run through about four and a half million candidates.
3656200	3657840	So this is going to take a little bit.
3657880	3660780	So we'll let that run down there and we'll let our path while masks keep running.
3669820	3671740	The old Minga special.
3672080	3676900	You know, this card has like 13 gig of video memory.
3676900	3678280	We'd probably be fine.
3679920	3681000	Let's do it.
3681000	3682020	I ain't scared.
3709690	3711150	Right, yeah.
3717410	3719930	That dictionary just grew massively for pack.
3719930	3722110	So, oh well, it'll get over it.
3742460	3743360	Okay.
3746300	3754470	So we're gonna do rocky.hash.
3754490	3755570	What'd you want?
3755570	3758230	You wanted the pot.dict.
3760350	3764090	One, two, three, four, five, six.
3764090	3765650	All right, here we go.
3786500	3790300	So we're auto-generating just shy of a million rules.
3790300	3793740	And we're going to run that against every...
3797600	3798260	What?
3798840	3799840	Because.
3800120	3801640	Because I don't want to.
3812050	3813310	What if there's...
3813310	3818550	What if there is a 65 character password in here?
3820820	3822240	I want it.
3822260	3824340	And I'm not going to get that with taco.
3830940	3832540	Why no w4?
3832540	3835360	Yeah, that's a good question.
3836180	3837860	Because I'm trying to run pack.
3837860	3838840	That's why.
3840620	3843660	I would like this box to actually remain accessible.
3844700	3845580	I don't...
3845580	3846360	You know what, dude?
3846360	3849280	My armpits smell like free birds right now.
3849280	3850340	It smells delicious.
3856820	3858640	Nope, that's too close.
3858640	3861140	Oh, well, you're throwing prints in there.
3863340	3865100	That's a little close to cheating.
3865100	3865960	We don't want to use...
3865960	3869720	We don't want to use rocky.hash to crack rocky.hash.
3869720	3871940	That kind of defeats the purpose.
3882320	3883280	If we did that...
3885300	3887540	Imagine Rocky just came out, right?
3887540	3891880	Like we're all we're all fawning over the fact that we have 14.3 million hashes
3891880	3893300	and we want to crack them.
3893520	3894600	We wouldn't have that.
3894600	3896860	We wouldn't know what rules Rocky was using.
3896860	3898400	It's totally unfair.
3901170	3904230	It's like walking in to do a pen test with a domain admin account
3904230	3906750	and then claiming you own the entire network.
3906750	3907810	Get out of here.
3925570	3926690	Almost at 20...
3926690	3928030	Almost at 25.
3928990	3930150	We can do it.
3936100	3937640	Do you put on your Bon Jovi?
3937640	3938460	Let's go.
3963670	3966410	It probably would have been smarter to write the cracks to a file.
3966410	3967930	So this would go a little bit quicker.
3967930	3970670	But it's also a little less interesting
3970670	3974370	because then you just sit there and look at a status screen updating every 20 seconds.
3999380	4002680	See, but this looks like it could actually be an interesting mask to run.
4004960	4007200	So we've got a big string of these.
4010880	4012260	There's some with E.
4012260	4017620	Let's try doing a lower in six digits.
4024540	4026180	So we'll do A3.
4026180	4030660	We're going to do lower 2, 3, 4, 5, 6.
4030660	4040480	And then just in case there's some that are maybe five, we'll do increment.
4040520	4042680	And we're actually going to write these to
4046700	4050360	rocky.out, because this should run fast enough, it won't matter.
4082260	4083140	Better?
4109810	4112430	All right, so 25, 21.
4113970	4115750	So we're definitely getting cracks.
4115750	4123990	So we started at 25.07, so we got, what, 14 or 0.14% out of that.
4124790	4126830	That's not as good as I thought it would be.
4127050	4128490	This is more... this one was more fun.
4128490	4131530	Actually, let's not even do that yet.
4133630	4135770	Let's roll our cracks back in.
4141900	4144540	And this is pot.dict.
4151740	4153360	I'm going to sort u.
4236880	4239080	Did that just say it's close to the end?
4306710	4309690	We need to roll the old hashes back in too, though.
4485830	4487330	Dude, is this going to finish?
4488870	4490350	In nine hours?
4490590	4491970	Oh my god.
4495520	4497180	Ain't nobody got time for that.
4500900	4502740	Once pack's done, we'll...
4502740	4503460	Actually, you know what?
4503460	4505100	If I kill this pack, we'll go faster.
4505100	4509600	So we'll let pack do its thing, and then we'll run the pack rules.
4534000	4534900	Now, you know what?
4534900	4537780	I want to run...
4538220	4539020	What was that?
4539020	4541380	Lower, one, two, three.
4541580	4542560	We already do this?
4544760	4545980	I think we did.
4546300	4548240	Let's do the opposite of that.
4548240	4552360	So we've got this one, which seems to be doing a thing.
4552980	4556660	One, two, three, four, five, six, lower.
4557020	4560640	One, two, three, four, five, six, lower.
4635900	4636640	Uh-oh.
4636640	4637700	Did we break it?
4657090	4658550	I think it's broken.
4675520	4682640	We ran out of memory because pack is trying to do four million rules.
4684020	4684720	Yeah.
4689000	4690900	I need a sad trombone.
4705070	4706710	Should've let pack finish.
4707610	4708690	Oh shit.
4728260	4730260	Well, we didn't do too bad before we crashed.
4730260	4731100	I mean, I can't even...
4731100	4732260	I can't even scroll.
4732260	4732940	Like, this thing is...
4734100	4735440	This thing is toast.
4738700	4739420	So we did...
4740900	4742160	What do we have here?
4743620	4745700	2.9, so we're at three million there.
4745700	4749220	And then we trimmed out about three million.
4749220	4749860	So we cracked about...
4752600	4756260	Well, I guess that would be almost 50% then, right?
4757240	4760440	So we've cracked half of Rock You in an hour and 19 minutes
4761540	4765900	using nothing but masks and a couple word lists.
4765900	4768820	I think we used the English dictionary.
4769100	4771900	Got a bunch of stuff with some hybrid attacks.
4774560	4777080	Did some mask attacks with digits.
4778160	4781460	Because for whatever reason, Rock You has a million digit passwords.
4831480	4833380	No, this is it.
4834100	4834800	You have to...
4835860	4837420	Britney Spears forum.
4844110	4845950	Oh shit, we're back.
4849960	4851300	Pack did its thing.
4861180	4862640	Really inopportune time, too.
4862640	4864220	I just shoved food in my mouth.
4867380	4870220	All right, so pack went and took a look at
4870220	4872660	all the words that we had in our word list.
4872660	4876620	And I built a rule set out of that.
4877960	4879560	And then it sorted that rule set.
4879560	4881400	So we can take this analysisSorted.rule
4882400	4884150	and feed this in on our...
4888440	4890700	feed this in using our pot.dict.
4891300	4893320	We should get a shit ton of cracks.
4893540	4894620	Let's see what happens.
4905220	4997760	pot.dict techr pack analysisSorted rule.
4998340	5001180	No, and we don't have to cover those because
5002240	5004640	hashcat defaults to MD5 as it's...
5006540	5009060	It defaults to MD5 as the hash type.
5009060	5011580	And since we're running MD5s, we don't need to worry about it.
5011580	5014160	And because we're still doing dictionary attacks,
5014160	5016140	we don't need to specify A because
5016800	5019480	the default value is to do a dictionary attack.
5019800	5024440	So adding rules to a dictionary is still a dictionary attack.
5025640	5027620	It's just mangled by rules.
5041600	5044380	I mean, at this point, we might just crack everything.
5089430	5092090	I think I just saw my password fly by too.
5096750	5099190	The hell's with the 727s?
5100950	5103050	A bunch of Boeing fans at Rocky.
5151280	5152820	Yeah, I saw that.
5193680	5194960	I think so.
5198020	5199240	Let's do it.
5213410	5216730	And if only that were the case.
5217650	5220370	All right, so password.dict.
5220370	5223010	And then we're going to run...
5224030	5225930	We're not going to run pack again because...
5227890	5229190	No.
5230730	5237530	And we want analysis rule sorted.
5278360	5280940	I would laugh if this got nothing.
5282700	5285680	I think it did it.
5289780	5291520	2787, yeah.
5295940	5297860	Good work, Manga, you got nothing.
5345540	5346420	I don't know.
5346420	5350040	It's only one word, why would it have queued?
5350040	5351920	Maybe because it split the workload?
5360340	5361720	No, there's an R.
5362920	5364020	Oh, wait.
5373520	5374640	All right.
5400700	5402100	Yeah, yeah, yeah.
5404870	5406310	I missed an R.
5455140	5456300	What was that?
5456340	5458760	Two percent, roughly.
5463600	5467260	2787 to 3074, almost three percent.
5471370	5472330	Now, what if...
5476220	5479740	I don't want to do the whole thing because that's going to take way too long.
5482080	5505640	What if s-w-o-r-d...
5509050	5510650	We'll do two to start.
5510650	5512050	No, we'll do one to start.
5517850	5519230	Forgetting all kinds of stuff.
5519610	5559710	I probably should have done this as increment because these startup times are
5560350	5562170	getting a bit ridiculous.
5585970	5587630	Word pass.
5590230	5592310	No one will ever guess.
5667300	5668620	Oh, we're getting faster.
5668620	5673800	We're up to 500 million, almost 500 million.
5712460	5715080	Yeah, drosap, drosap's always a good one.
6021720	6024040	I mean, that did pretty good.
6029280	6030080	Nope.
6030080	6033920	So that doesn't matter because we already specified it here.
6048260	6051100	Let's run it out a few more characters and see what it gets.
6065760	6070880	Something that would have been smart is if we did the lowercase o, the uppercase o,
6070880	6072080	and then a zero.
6072460	6076640	And then for i, we do lower i, upper i, and a one.
6079660	6081220	Run that file.
6081680	6083680	Yeah, I did that.
6084680	6088860	We ran the top 100 pathway masks.
6106660	6108000	Yeah, yeah, yeah.
6108000	6109440	I'm not doing that.
6109440	6111140	Dude, on a Tesla?
6112720	6113600	No.
6144500	6147440	All right, after this one, we'll run it.
6148640	6149860	That's going to take 10 minutes.
6149860	6150920	I don't want to do that.
6151900	6159820	If you're over there analyzing what the fastest thing you can run to crack as much as you can,
6159820	6161380	be disappointed.
6161780	6163000	So what do we have?
6163000	6172660	So we have A3 incrementing from a minimum of 8 with a runtime of 17 seconds.
6172660	6178380	We have 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11.
6178380	6179200	Okay.
6183760	6185340	Oh, this changed.
6198420	6201340	Yeah, increment min.
6284500	6288660	Yeah, the tools haven't been updated in a while though.
6312860	6315020	I don't know, I mean, there comes a point where,
6316680	6320800	you know, you get used to or you've already generated the things that you need to generate,
6320800	6324260	and you've already found other ways of doing something that you don't need to
6324520	6326780	pull the tools back into it.
6328680	6331280	Yeah, no, I still pwmin.
6340780	6344800	I mean, hell, I didn't even catch it when you typed it and typed it myself, so, you know.
6391470	6396790	It's not cheating that much because we're still running the attacks.
6396790	6398090	Yeah, yeah, I know.
6399010	6400750	But there's a very big difference between,
6400750	6405930	let's use the rules generated from RockYou against RockYou versus hcstat.
6411400	6412780	Because you still have to base...
6412780	6415440	You still have to get your baseline in before you do that.
6415660	6416720	It is cheating.
6420370	6421770	That's why we regenerated...
6423430	6425470	We regenerated the rule set down here.
6433280	6435140	Yeah, yeah.
6447620	6448980	Oh, no, no, no, no.
6452470	6457610	But I'm done in about 30 seconds anyway because it's 11 o'clock and
6460580	6462480	I want to take a break from sitting here.
6498980	6506620	All right, so we did 4.4 million plus...
6518030	6519830	Math is hard.
6519970	6525010	One, four, three, four, four, three, nine, one, minus...
6530270	6535390	One, one, nine, two, five, two, five, four, seven, two.
6543550	6548730	So, four, that's 5.8 million.
6549250	6552950	So we did just under 50% in an hour and 40 minutes.
6554090	6555590	It's pretty good.
6560990	6562410	So I'm gonna blow this box away.
6562410	6563410	That was fun.
6564870	6568010	Maybe tomorrow we can do something similar.
6568010	6568750	I'll save the...
6568750	6570950	I'll save the cracks, but we'll see.
6570950	6572490	Saturday night's gonna be crazy.
6572610	6573630	Anyway, that's it for now.
6573630	6574210	Thanks, guys.