Get a Crash Course in Writing from 2. I only remember one practical writing lesson from my three years as an English major: Whenever you can, put the. Along with the LinkedIn password dump, dating site eHarmony has confirmed that some of its users’ passwords have also been published online, possibly by the same.
'Inveniam viam aut faciam': I will either find a way, or I shall make one Hashdumps and Passwords. 12-Dec-2012: I need to say thanks to Michael Souris (Thanks!) for providing me with the work he had done on the LinkedIn hashes. Combining our work allowed for some quick progress. 18-Dec-2012: Some progress across all lists and added ' Project OpIsrael' hashes and dictionary of found plaintext. 30-Dec-2012: Seperated out the 'double-md5-ed' hashes from Blackstar and Opisrael. Added dictionary analysis reports. Also some progress across all lists.
15-Jan-2013: Added ' Gawker' from 2010. Added ' Stratfor', ' Rootkit.com' and ' Project Mayhem' from 2011. Added ' BKAV' from 2012. Progress across all lists.
I also need to say thanks (Thanks!) to for sharing his work on the MD5 hashes. 05-Apr-2013: Added ' Project Hellfire', ' Project Whitefox', ' InfoSecWest 2012' and ' InsidePro 2012' for 2012. Added ' Project Sunrise', ' Walla', ' Casio.cn' and ' ABC' for 2013. Some progress across all lists. I have been asked to compress the dic and hash files so that is done.
25-Aug-2013: Some progress across all lists. Thanks to specifically for contributions to ' Walla' and ' Casio' cracking and for pointing a bunch of us ( and others) to a stack of past dumps. So with the number of small dumps, I now add anything with less then 10,000 hashes to a ' misc' list with a note -if possible- of the source. So I have added ' DamnSmallLinux', ' Dhool', ' Gaming', ' FFGBeach', ' Battlefield' and ' Misc-2013-MD5'. 13-May-2014: Lots of updates - (a) most importantly, I want to thank (from ), Mr 'emkei.cz', and:) for much appreciated help and contributions, (b) extra analysis reports, (c) added ' TomSawyer', ' OpSea', ' Slyck', ' Aha', ' Forbes', (d) started adding in ' what's left' files and (e) split the pastebin hashes off since that grows almost daily and (f) and lots of progress. 14-May-2014: Up to and including this update, I have been using hashcat and CPU cracking. Thanks to I am now able to use oclhashcat with some R9 GPU's.
So I am reworking my workflow a bit and making much better progress on the salted hashes. Here is the list of all the hashdumps I am working on along with the relevant details: 2010: Gawker DES 53329 left 2011: Project Mayhem MD5 Stratfor MD5 Rootkit.com MD5 2012: BKAV VB 3.8.5 88205 left BKAV VB.
'Inveniam viam aut faciam': I will either find a way, or I shall make one EHARMONY - PLAINTEXT AND HASHDUMP Well, I have cracked more then 80% of the EHarmony hashdump so time for me to report on the passwords and release the plaintexts. I will update this page as I get to 90% and so on. I used cracking this hashdump to test my LinkedIn plaintexts and to explain some hashcat basics (see ). the hashes are MD5, but there seems to be a few non-MD5 entries that hashcat will complain about. the hacker who released them has removed all duplicates. EHarmony converted all lowercase to uppercase thus greatly reducing the keyspace for cracking.
I am guessing that these passwords represent a password rules change, there are some passwords that look like they were cut off at 14 characters but also a very few with more then 14 characters. Also there are almost no passwords with special characters in them. I would guess that at some time EHarmony changed the password rules and this hashdump represents passwords from before and after that change.