roycewilliams

# The first 10,000 rounds of SHA256("password")
# Courtesy MDXfind - https://hashes.org/mdxfind.php
# (Mirror: https://www.techsolvency.com/pub/bin/mdxfind/)
# Source: https://gist.github.com/roycewilliams/56b17c9d8c6937725ee7e6331db79fda
#
# See also: https://gist.github.com/roycewilliams/5e8d676ac4fe54fb7b6cb233b0721f57
#
$ echo -n 'password' | mdxfind -h '^SHA256$' -z -f /dev/null -i 10000 stdin 2>&1 | fgrep password | sort -tx -n -k 2 | align
SHA256x01    5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8:password
SHA256x02    113459eb7bb31bddee85ade5230d6ad5d8b2fb52879e00a84ff6ae1067a210d3:password

roycewilliams

# The first 10,000 rounds of SHA1("password")
# Courtesy MDXfind - https://hashes.org/mdxfind.php
# (Mirror: https://www.techsolvency.com/pub/bin/mdxfind/)
# Source: https://gist.github.com/roycewilliams/1c8044e40ed0716f99a773036a8891ac
#
# See also: https://gist.github.com/roycewilliams/5e8d676ac4fe54fb7b6cb233b0721f57
#
$ echo -n 'password' | mdxfind -h '^SHA1$' -z -f /dev/null -i 10000 stdin 2>&1 | fgrep password | sort -tx -n -k 2 | align
SHA1x01    5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8:password
SHA1x02    353e8061f2befecb6818ba0c034c632fb0bcae1b:password

roycewilliams

<?php

    //------------------------------------------------------------------------
    // Name: sha512crypt_autotune_demo.php v1.1
    // Purpose: demo of tuning sha512crypt rounds to match platform speed
    // Author: Royce Williams - royce@techsolvency.com
    // License: MIT
    // Source: https://gist.github.com/roycewilliams/09ddd10504d560c02b28049759cd666f
    //
    // To test, SSH to your system, fetch the file, and then run it as PHP.

roycewilliams

# /usr/bin/perl
#-----------------------------------------------------------------------
# $Id: malign,v 1.2 2018/06/16 22:25:40 root Exp root $
# Created: 2010-02-08

# Description: Determine the narrowest left margin in passed text,
#   then pad the output of align with this pad (less 1, align's left margin).
#-----------------------------------------------------------------------
use strict;
use warnings;

roycewilliams

Conditions of Use
Last updated: May 3, 2021


Welcome to Amazon.com. Amazon.com Services LLC and/or its affiliates ("Amazon") provide website features and other products and services to you when you visit or shop at Amazon.com, use Amazon products or services, use Amazon applications for mobile, or use software provided by Amazon in connection with any of the foregoing (collectively, "Amazon Services"). By using the Amazon Services, you agree, on behalf of yourself and all members of your household and others who use any Service under your account, to the following conditions.


Please read these conditions carefully.
We offer a wide range of Amazon Services, and sometimes additional terms may apply. When you use an Amazon Service (for example, Your Profile, Gift Cards, Amazon Video, Your Media Library, Amazon devices, or Amazon applications) you also will be subject to the guidelines, terms and agreements applicable to that Amazon Service ("Service Terms"). If these Conditions of Use are inconsistent with th

roycewilliams

# Mirror of: https://jenda.hrach.eu/f2/mtgox-yubikey.txt
#
# If you have a Mt Gox YubiKey and are looking to turn it into a generic YubiKey ... don't!
# I am motivated to trade you two standard modern YubiKeys of your choosing for an unaltered
# Mt Gox YubiKey for my lab/collection - contact me at royce@techsolvency.com. Thanks!
#
Yubikey	Prefix		Password
=======	======		========
123456A	d2868706da69	32e193d3e932
123456B	cf0d9f4b8d2b	d4deb686e7bc

roycewilliams

#------------------------------------------------------------------------------
# Character frequency of @RealEnderSec's 5-year window (315 million) of
# Kaspersky Password Manager (KPM) passwords.
# Ref: https://twitter.com/RealEnderSec/status/1412796282188484617
# Rough graph: https://twitter.com/TychoTithonus/status/1413305845924864006
#
# Frequency order: Q w W q x g X k K G U u 1 V v z Z m M j y ! p ~ Y P J f @ 
#  2 c o i # O h b $ 0 F I e s % S ^ H d 3 & C * E + - 4 B / { , . D 5 t n T 
#  N l 6 } L [ a 7 ] ( A 8 : 9 ) r ; R
#------------------------------------------------------------------------------

roycewilliams

#!/bin/env python

# Strips attachments from mbox, writes to new mbox.
# Does not load entire old mbox into memory first - useful for very large mboxes.
# Ref: https://ask.slashdot.org/story/11/12/04/1754257/ask-slashdot-handling-and-cleaning-up-a-large-personal-email-archive
# Ref: https://ask.slashdot.org/comments.pl?sid=2557794&cid=38260428

from __future__ import print_function
from mailbox import mbox, mboxMessage

roycewilliams

#
# From an anoymous contributor - thanks!
#

hashcat (v6.2.1) starting in benchmark mode...

Benchmarking uses hand-optimized kernel code by default.
You can use it in your cracking session by setting the -O option.
Note: Using optimized kernel code limits the maximum supported password length.
To disable the optimized kernel code in benchmark mode, use the -w option.

roycewilliams

#!/usr/bin/env python
import collections
import datetime
from os import path
import pickle
import sys


if len(sys.argv) < 2:
    print('Usage: bindify.py zonefile')