Royce Williams

Whatever makes the most sense for the available space. If it's hard to cram it into the available space, no worries. :) Since more than one kind of 2FA can...

Not currently. There is no official online MDXfind documentation that lists its usage, but I have a snippet here that lists the formats: https://www.techsolvency.com/pub/bin/mdxfind/algorithms.txt

To be clear, the official distribution point of mdxfind is https://hashes.org/mdxfind.php I have a mirror of it with some additional information that you would otherwise have to download and run...

Sometimes the user will know what format was used. In that case, the separate field could indicate that. That field could be 0 if the format is unknown, and non-zero...

Only in passing - just briefly suggested also running against a different corpus (Hashes.org founds). Somehow this translated into getting my name on it. 😬

Distro update: Debian 11 (bullseye) now defaults to yescrypt. https://www.debian.org/releases/bullseye/amd64/release-notes/ch-information.en.html#pam-default-password

I honestly can't tell what a better way to manage this would be. Even code-signing certs would have to be on the server itself in order to sign new clients,...

Pie-in-the-sky idea: add an option to the client to only download hashcat from official sources - hashcat.net or GitHub. (And if the job requires a beta or custom version of...

@Nag1bat0r There is usually no requirement that the client be one provided by the server. Both hashcat and the hashtopolis client can be indpendently downloaded and usually Just Work. Of...

Yes, this is exactly the information I was looking for. Where is it located in the documentation? I want to understand why I could not find it.