password leaked

[wx69wx2023]

RockYou2024: 10 billion passwords leaked in the largest compilation of all time

Researchers discovered what appears to be the largest password compilation with a staggering 9,948,575,739 unique plaintext password

🔗 Source:
https://cybernews.com/security/rockyou2024-largest-password-compilation-leak/

🔗 Source archive:
https://disk.yandex.ru/d/1spMBmxcEnN95g
https://s3.timeweb.cloud/fd51ce25-6f95e3f8-263a-4b13-92af-12bc265adb44/rockyou2024.zip

magnet:?xt=urn:btih:4e3915a8ecf6bc174687533d93975b1ff0bde38a

[chants]

Is this anything more than the results of plaintext leaks and all hash cracked passwords from prior leaks of the past years? My guess is rainbow table attacks have allowed passwords up to certain sizes and with certain character sets to be cracked in mass due to data leaks. The source of this dB was not clear.

[kristamullpass6415]

Originally Posted by wx69wx2023

RockYou2024: 10 billion passwords leaked in the largest compilation of all time

Researchers discovered what appears to be the largest password compilation with a staggering 9,948,575,739 unique plaintext password

Not really.
Only some 10% of the passwords are new. Most are old ones from the 2021 leak. That is why it did not make big news this time.
Not worth the 45GB download.

-a.k.a Bl4ckCyb3rEnigm4 / Ethereal (my alternate nickname)

[wx69wx2023]

https://cybernews.com/security/rockyou2024-largest-password-compilation-leak/

"The file with the data, titled rockyou2024.txt, was posted on July 4th by a hacker forum user ObamaCare."
these passwords came from a mix of old and new data breaches. Based rockyou2021.

You can check if your data was exposed in historic data breaches using the Cybernews data leak checker below.
https://cybernews.com/personal-data-leak-check/


""

[ops]

https://specopssoft.com/blog/rockyou2024-analysis-password-leak/

Here is an analysis article, I also downloaded and analysis it myself. It was similar to the description in this article. I felt that it was not worth downloading and using, and the data was very messy.

[flightwatch]

Originally Posted by kristamullpass6415

...Not worth the 45GB download...

When unpacked, it takes up 145 GB

And trying to find the password for one WPA.hash with dualGPU (RTX4080 and RTX 4070 Ti) is estimated at 90 minutes.

Can someone provide approximate times for the better cards? For example, RTX4090.

[sendersu]

try Nvidia RTX50

[niculaita]

2 month for RAR

[WRP]

Originally Posted by niculaita

2 month for RAR

2 months on AES? Really?

[niculaita]

Yes. I tried with passware 2022 and for password bigger than 30 till 128 in lenght only processor runs about 180 p / s. I do knot why only for shorts passwords video card works.

[traf0]

Originally Posted by WRP

2 months on AES? Really?

maybe because it is doing a dictionary attack, not searching the full key space

[niculaita]

How to search the full key space ?

rarhashes.txt
$RAR3$*1*bd8e558b92fd453c*cebb2d59*48*34*1*79c0a77fb8f9b042c07c78191c25f3b0b8fd4b8514868415341716ba8fe304fbbc4372df4cdc1757cff273c972f9df1d*35

hashcat -m 23800 rarhashes.txt rockyou.txt

?

[flightwatch]

Originally Posted by niculaita

...hashcat -m 23800 rarhashes.txt rockyou.txt...

"No such file or directory"

hashcat -m 12500 rarhashes.txt rockyou.txt

"Token length exception"

[traf0]

Originally Posted by niculaita

How to search the full key space ?

rarhashes.txt
$RAR3$*1*bd8e558b92fd453c*cebb2d59*48*34*1*79c0a77fb8f9b042c07c78191c25f3b0b8fd4b8514868415341716ba8fe304fbbc4372df4cdc1757cff273c972f9df1d*35

hashcat -m 23800 rarhashes.txt rockyou.txt

?

it is not realistic searching the full key space for 128 bit key length
only in case of 40 bit long keys like Acrobat 2-4 or Office 97 documents

[niculaita]

Originally Posted by flightwatch

"No such file or directory"

hashcat -m 12500 rarhashes.txt rockyou.txt

"Token length exception"

download https://disk.yandex.ru/d/1spMBmxcEnN95g and desarchive text file near hashcat.exe

rename text rockyou2024.txt to rockyou.txt

create a rarhashes.txt and copy inside the long hash and save

try again