-
I find studying systems to be interesting, which naturally leads me to doing security work. Lately, I have been reflecting and found the human part of …
-
In this post, I want to talk more about the applications and use cases for non-deterministic application workflows using predictive models like LLMs. As the …
-
This is an opinion piece on some of my personal frustrations and disinterest in giant media platforms, especially as the prevalence of anti-human technology …
-
In this post, I am going to go over a few high-level methodologies used to create all the rules on Hashcracky.com. I started making my own rule sets several …
-
In this short post we will be going over setting up a Proxmox Virtual Environment (VE) with GPU passthrough in an infrastructure/home lab experiment. Proxmox VE …
-
A component of hash cracking is the reliance on hardware to perform calculations needed for successful recovery. This often means getting access to or …
-
Recently, I have been working on Jabbercracky (now Hashcracky), a free hash cracking Capture The Flag (CTF) website. Development started in November, with the …
-
No Cap Cracking: Improving Offline Hash Recovery Methodologies At Security BSides Cayman Islands 2024, I presented a training for hash cracking based around my …
-
In 2024, I wrote a blog post about my experience creating a multi-GPU home server for a home security lab. Now, I want to revisit the post a bit to give an idea …
-
One interesting target in hash cracking is passphrases. These are unique because they are not best sourced from other found material, like other passwords, but …
-
We are going to make a Raspberry Pi cluster that can be used as a distributed computing lab and host high-availability services using Kubernetes and K3s …
-
Everyone has said it at some point: “I’m so stupid.” It’s a natural thing to do. At some level, we all want to improve, but we rarely think about the …
-
“Have I Been Pwned” or HIBP is a well-known resource when it comes to breached credential security. The service offers a powerful lookup API to identify if an …
-
I want to take a side-step from technical writing and talk about my experience with something that has influenced my life, but I rarely discuss, which is …
-
Ensuring that the base hashing algorithm is of sufficient strength and that users are setting strong passwords can greatly improve the security of a system. …
-
In this post, I would like to explore some attack modes for Hashcat and how they can make a dramatic difference in recovery efforts against modern algorithms …
-
There are many ways to crack passwords, and offensive tooling for password security has provided a lot of new and exciting attack methods to reveal plaintext. …
-
To crack hashes, practitioners use large word lists containing likely password candidates. They are used with different attack types, such as rules, to recover …