4 ms·
Attackers don't come up with every entry on the wordlist they throw into hashcat themselves. The attacker's imagination has essentially zero correlation with th
by anonym29 11mo ago
Attackers don't come up with every entry on the wordlist they throw into hashcat themselves. The attacker's imagination has essentially zero correlation with the contents of their wordlist.
- arcfour 11mo agoOkay. How many major wordlists include emojis? Maybe...like...a dozen entries at most across all of them?
- anonym29 11mo agoRest assured, the world's intelligence agencies and cybercrime rings aren't just taking vanilla open source wordlists off github and hoping they get lucky. You don't know what your adversary's wordlist contains, and assuming you do is a recipe for overconfidence.
- arcfour 11mo agoYes, "if your enemy is state sponsored attackers" you shouldn't do many things, like use bcrypt incorrectly, or really passwords almost at all. That's obviously not what I'm saying.