| #------------------------------------------------------------------------------ | |
| # Top 20K hashes from the Troy Hunt / haveibeenpwned Pwned Passwords list v2 (2018-02-21) | |
| # with frequency count and cracked plaintext passwords | |
| # | |
| # The latest version of this file can be found here: | |
| # https://gist.github.com/roycewilliams/281ce539915a947a23db17137d91aeb7 | |
| # | |
| # NOTE: THIS FILE IS DEPRECATED. | |
| # The equivalent of this file, but based on v6 of the Pwned Passwords, is here: | |
| # https://gist.github.com/roycewilliams/226886fd01572964e1431ac8afc999ce |
| # hashcat rule to only insert non-contiguous dots/periods | |
| # Created 2024-04-13 by TychoTithonus (Royce Williams) | |
| # Source: | |
| : | |
| i1. | |
| i2. | |
| i2.i1. | |
| i3. | |
| i3.i1. | |
| i3.i2. |
| #------------------------------------------------------------------------------ | |
| # Top 20K hashes from the Troy Hunt / haveibeenpwned Pwned Passwords list v6 (2020-06-19) | |
| # with frequency count and cracked plaintext passwords | |
| # | |
| # The latest version of this file can be found here: | |
| # https://gist.github.com/roycewilliams/226886fd01572964e1431ac8afc999ce | |
| # The equivalent of this file, but based on v2 of the Pwned Passwords, is here: | |
| # https://gist.github.com/roycewilliams/281ce539915a947a23db17137d91aeb7 | |
| #------------------------------------------------------------------------------ | |
| # Notes and references: |
The CA/Browser Forum has voted to mandate that CAs must start checking CAA records to control certificate issuance (to verify what CAs are allowed to issue certificates for a domain) by September 8th, 2017.
https://blog.qualys.com/ssllabs/2017/03/13/caa-mandated-by-cabrowser-forum
Full language of the ballot is here.
| #----------------------------------------------------------------------- | |
| # same-quad-list.txt: a list of same-quad IPs by owner w/DNS status | |
| # | |
| # The CIDR network is the largest contiguous/bit-boundary-aligned block | |
| # that is allocated to that entity (actual allocated range may be larger) | |
| # NOTE: some ranges not yet converted to CIDR. | |
| # Updates welcome - leave comment and/or ping royce@techsolvency.com | |
| #----------------------------------------------------------------------- | |
| # For human efficiency, some records are repeated here as comments. | |
| # |
| #!/usr/bin/python | |
| # -*- coding: utf-8 -*- | |
| # | |
| # Copyright 2017, Francesco "dfirfpi" Picasso <francesco.picasso@gmail.com> | |
| # | |
| # Licensed under the Apache License, Version 2.0 (the "License"); | |
| # you may not use this file except in compliance with the License. | |
| # You may obtain a copy of the License at | |
| # | |
| # http://www.apache.org/licenses/LICENSE-2.0 |
| #----------------------------------------------------------------------------- | |
| # bcrypt hashes for the plain 'password', costs 4 through 31, and how much | |
| # time it took to generate the hash on a reference system (CPU). | |
| #----------------------------------------------------------------------------- | |
| # | |
| # htpasswd version matters - this one is from apache2-utils (2.4.18-2ubuntu3.10) | |
| # Note that the official Apache version now stops at bcrypt cost 18: | |
| # | |
| # https://bz.apache.org/bugzilla/show_bug.cgi?id=62078 | |
| # |
(mirror snapshot of: https://infosec.exchange/@tychotithonus/111924626712765292)
summary: new DNSSEC validation DoS vulnerabilities CVE-2023-50387 ("KeyTrap"), CVE-2023-50868 (NSEC3 vuln)
(living doc, updated regularly - if you prefer a low-edit post to boost, use https://infosec.exchange/@tychotithonus/111926621712441626)
Looks like DNS-OARC coordinated fixes in advance, but I don't see a centralized analysis, other than this announcement from the team who discovered KeyTrap: https://www.athene-center.de/en/news/press/key-trap ... and their technical paper: https://www.athene-center.de/fileadmin/content/PDF/Technical_Report_KeyTrap.pdf
| # 10,000 iterations of SHA256 hash of an "empty" password (zero-length string). | |
| # Generated with: echo "" | mdxfind -h '^SHA256$' -i 10000 -z -f /dev/null stdin | |
| # MDXfind version: $Header: /home/dlr/src/mdfind/RCS/mdxfind.c,v 1.120 2024/01/22 20:41:23 dlr Exp dlr $ | |
| # Source: https://gist.github.com/roycewilliams/35a015f3914541ce829e2718dd4af871 | |
| SHA256x01 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855: | |
| SHA256x02 cd372fb85148700fa88095e3492d3f9f5beb43e555e5ff26d95f5a6adc36f8e6: | |
| SHA256x03 e67e72111b363d80c8124d28193926000980e1211c7986cacbd26aacc5528d48: | |
| SHA256x04 f7d062d662826ed95869851db06bb539b402047baee53a00e0aa35bfbe98265d: | |
| SHA256x05 2a132dbfe4784627b86aa3807cd19cfeff487aab3dd7a60d0ab119a72e736936: | |
| SHA256x06 bdca9e8dbca354e824e67bfe1533fa4a238b9ea832f23fb4271ebeb3a5a8f720: |