This is interesting and NTLM is applicable to Active Directory dumps but not much else. It is a very weak hash, is unsalted and similar to MD4. The mask is also of course an optimisation that may not be applicable to the real world. Hopefully we have another video taking on something like bcrypt.
Good. It shows us how insecure simple and short passwords and how fast Quadro and modern GPUs. But I guess even back in 2018 there were more strict demands for passwords at registration on any new sites. Like using digits, lower and upper case, special symbols and so on. I did almost the same procedures you did in this video but on my old CPU just to find out the difference in time needed to crack the password of different complexity and from different hash generators like ZIp and RAR. Fox example 6 symbol password from Zip is not the same made by RAR. First one you can open even on CPU quite fast but second one you need a beeter CPU or even GPU.Adding the length is good but making more complex subset also changes time needed to crack password dramatically. "hello1" is weak while "hE1Lo_" not so weak remaining the same password's length. So I would like to see also the estimated time neeed for cracking real world long passwords where not 26+26+10 digits used but also special symbols at least, where charest equal not 62 but 192 or so.
On my gpu, for sha-256, it would take (for all unknown letters, capitals, symbols and numbers) 15 years to crack a 6 letter password, and until the next big bang to crack an 8 character password. It's crazy how secure even short passwords can be if you don't use common phrases that are vulnerable to dictionary or rainbow table attacks.
Those K80's are ill suited for this type of work. I can tell you that just one RTX2080S can achieve 40GH/s. 2080ti would probably achieve 50GH/s for MD5.
@learn2 farm You're right, more cores and higher core speed is better for Hashacat. The Newer GPUs (RTX 30xx) are just a lot faster than previous generations. You can see this in the benchmarks for all these GPUs and compare with the old GPUs
For the same mode? Because he's just hashing NTLM which isn't that difficult but more importantly, it's clear he's not optimizing at all, you can tell both with the commands he's using and the reported utilization each time. Notice his loops are only at 26 and then later at 32. If he had set parameters then your one GTX 1080 might meet one of the k80s but not all 8 I dont think
It is easy when u setting all the prefix. In real world brute force we don't even know the sequence digit symbol lower case lenght that been used. It will take longer and forever to crack those password
You're running an almost one million dollar worth of rig and all you do is cracking hellboy word combinations? Please show us something interesting. Crack some 18 character password with upper case letters, numbers and symbols. One of those cards worth 52000 Turkish Lira (9000 USD) in Turkey. 8 of them makes 416000 which is equal to a good, expensive apartment in istanbul city.
He is running on an AWS instance. He didn't actually buy that rig. Its not that expensive to run that rig for the length of this video if you are paying per minute on AWS
Maybe where you are at, but he only has about 10,000 USD worth of cards. depending what he does he probably already paid them off with whatever he does.
Not everyone can handle this much power
This is interesting and NTLM is applicable to Active Directory dumps but not much else. It is a very weak hash, is unsalted and similar to MD4. The mask is also of course an optimisation that may not be applicable to the real world. Hopefully we have another video taking on something like bcrypt.
Hi, sorry question, but can you tell me which video card you can choose for brute force from the 30 or 40 series (500-650 $ + -)
Would really love to see the hash rate when used with LUKS
Good. It shows us how insecure simple and short passwords and how fast Quadro and modern GPUs. But I guess even back in 2018 there were more strict demands for passwords at registration on any new sites. Like using digits, lower and upper case, special symbols and so on. I did almost the same procedures you did in this video but on my old CPU just to find out the difference in time needed to crack the password of different complexity and from different hash generators like ZIp and RAR. Fox example 6 symbol password from Zip is not the same made by RAR. First one you can open even on CPU quite fast but second one you need a beeter CPU or even GPU.Adding the length is good but making more complex subset also changes time needed to crack password dramatically. "hello1" is weak while "hE1Lo_" not so weak remaining the same password's length. So I would like to see also the estimated time neeed for cracking real world long passwords where not 26+26+10 digits used but also special symbols at least, where charest equal not 62 but 192 or so.
On my gpu, for sha-256, it would take (for all unknown letters, capitals, symbols and numbers) 15 years to crack a 6 letter password, and until the next big bang to crack an 8 character password.
It's crazy how secure even short passwords can be if you don't use common phrases that are vulnerable to dictionary or rainbow table attacks.
I've got access to a system with 4x RTX 3090s and one with 2x RTX 4090s. Maybe I'll try this on those rigs, I bet they rip!
U can upload how u install the gpu’s on the kali machine without disturbing ur own cpu/gpu?
GPU has a power that greedy people can't take because it would be the end of the passwords xD.
I wonder the speed difference ?
Like I have 1 Nvidia GPU says 12 days 13 hours. So what would the math be if I added 7 move? Can you tell me?
Go for the new nvidia gpu they have you want high cuda core count from what i understand
And for sli you want to use all the same cards so take that into account when buying them , cost / cuda cores
So what is the math adding 7 more for total of 8?
A 12 day to crack would now be what adding 7 more?
What is the math?
That shell look as amazon service with tesla. How is the price of this vps with 8 tesla ?
Those K80's are ill suited for this type of work. I can tell you that just one RTX2080S can achieve
40GH/s. 2080ti would probably achieve 50GH/s for MD5.
The RTX 3080 is 54000 MH/s and the RTX 3090 is around 65000 MH/s. Nvidia has really changed the game for hash cracking LOL.
@learn2 farm You're right, more cores and higher core speed is better for Hashacat. The Newer GPUs (RTX 30xx) are just a lot faster than previous generations. You can see this in the benchmarks for all these GPUs and compare with the old GPUs
Which gpu cloud you use?
It was SO painful watching you cut and paste using the mouse/trackpad. Bro, KEYBOARD SHORTCUTS!!
Really really interesting to me.
Wow having only ONE!!!! GTX1080 is almost the same cracking speed as this LMAO
For the same mode? Because he's just hashing NTLM which isn't that difficult but more importantly, it's clear he's not optimizing at all, you can tell both with the commands he's using and the reported utilization each time. Notice his loops are only at 26 and then later at 32. If he had set parameters then your one GTX 1080 might meet one of the k80s but not all 8 I dont think
impossible bro. for your outdated 1080 to get 13 days on a 12 character hash
It is easy when u setting all the prefix. In real world brute force we don't even know the sequence digit symbol lower case lenght that been used. It will take longer and forever to crack those password
I only got 37000 h/s
SAD
it's not hertz is hash...
Damn bro, can I have one?
You're running an almost one million dollar worth of rig and all you do is cracking hellboy word combinations? Please show us something interesting. Crack some 18 character password with upper case letters, numbers and symbols. One of those cards worth 52000 Turkish Lira (9000 USD) in Turkey. 8 of them makes 416000 which is equal to a good, expensive apartment in istanbul city.
He is running on an AWS instance. He didn't actually buy that rig. Its not that expensive to run that rig for the length of this video if you are paying per minute on AWS
@@whm1595 really. i didn't know that. what is the name of this service on aws?
p3.16xlarge is the instance type. costs about $25 per hour to run.
Maybe where you are at, but he only has about 10,000 USD worth of cards. depending what he does he probably already paid them off with whatever he does.
@@maddogmaz1576 It is clear he is using AWS in the video. He does not own the cards.
thanks.
I expected better. rtx 2080 ti in MD5 and 50000mh / s instead 8x k80 38000?!?!?
2080 Ti didn't exist when this video was made.
Cards that were available a year ago:
MD5 apprx speed:
gtx1080: 20GH/s
gtx1080 ti: 28GH/s
Still 4-5x faster than those K80 speeds.
@@rfi-cryptolab4251 So, I have 2*1080 and 2*1080TI, is that means equal to 18*K80, right?
why using a very very simple password? try with a strong password
yeah like adding special characters and that would be more interesting
N1
Bitcoin Private key recovery