agilebits / crackme Goto Github PK

In the docs where costs are calculated for generated passwords, we use a bunch of password generation recipes and results that reflect the generator from 2018. This needs updating.

After my comment on #3, I wanted to see if the hint generation was working properly. I took the string "governor washout beak" and just hashed it with sha256 unsalted, a single time and got:
7a754baa484373bfeb4d0ec3e71b07ebbbb1e5293486eb964ca90a2e3ec95ef8

I cracked this hash with the string via hashcat to confirm I had hashed it properly. If you convert this from hex to binary, you get:

111101001110101010010111010101001001000010000110111001110111111111010110100110100001110110000111110011100011011000001111110101110111011101100011110010100101001001101001000011011101011100101100100110010101001000010100010111000111110110010010101111011111000

Based on this commit , the hint generator thinks the hint should be:
{"governor washout beak", 3, "0b011"}

but 011 is neither the first 3 bits nor the last three bits (I mention this because initially I thought I might have been confused about whether @jpgoldberg was giving the first bits or last bits). I'm no expert, so I may be wrong, but I'm pretty sure that the hints are not correct.

Thanks, and let me know if I can provide any further information!

We are now in Daylight Savings Time, so noon should be quoted as "EDT", not "EST", in the README paragraph announcing the start date/time. This would then correct match the ITC time given.

This isn't an issue as such, more of a feature request for the docs.

I git clone'd agilebits/crackme in my MSYS2/mingw64 terminal, after installing go, and ran 'go get -u github.com/agilebits/crackme'.

As far as I can tell, I can run: go crackme/cmd/chcreator/main.go -t crackme/doc/answers-2018-03-30.json

to see if I have any hits with pre-supplied "answers" for testing, but I get no output after half an hour. Is that supposed to happen, is it really this slow to compute the results?

Can anyone supply clear guidance for complete newbies to this challenge? Maybe also a sample hashcat command or two?

Thanks!