Reusable Security
Password Cracking, Crypto, and General Security Research

Analyzing Tokenizer Part 2: Omen + Tokenizer
“I have not failed. I've just found 10,000 ways that won't work”- Thomas EdisonIntroduction:This is a continuation of a deep dive into John the Ripper's new Tokenizer attack. Instruction on how to configure ...

Analyzing JtR’s Tokenizer Attack (Round 1)
Introduction / Goals / Scope:This is a follow-up to my previous blog post looking at how to install/run the new John the Ripper Tokenizer attack [Link]. The focus of this post will ...

Running JtR’s Tokenizer Attack
Disclaimer 1: This blog post is on a new and still under development toolset in John the Ripper. Results depict the state of the toolset as-is and may not reflect changes made ...

Extracting Secrets from Packet Captures (A CMIYC2024 Story)
"Interest is the most important thing in life; happiness is temporary, but interest is continuous."- Georgia O'KeeffeIntroduction:The focus of this blog entry will be on tools and scripts to analyze packet captures ...

CMIYC2024: Wifi Cracking Challenge
"It is never too late to be who you might have been."- George ElliotIntroduction:This is a continuation of my write-up about this year's Crack Me If You Can challenges. You can view ...

CMIYC 2024: RAdmin3 Challenge
"Nothing is more permanent than a temporary solution."- Russian ProverbIntroduction:This is a continuation of my write-up about this year's Crack Me If You Can challenge. You can view the previous entry focusing ...

CMIYC 2024: Striphash Challenge
"I can accept failure. Everyone fails at something. But I can't accept not trying." - Michael JordanIntroduction:First off, I really want to thank the team over at Korelogic for putting together a ...

Tutorial for CMIYC2024: Registering a Team and Cracking Test Hashes
Whenever a thing is done for the first time, it releases a little demon.- Emily DickinsonGetting Ready For Crack Me If You Can 2024August is like New Years for me. With BSides Vegas, ...

Jupyter Lab Framework Example: Revisiting CMIYC2022
Everything that happens once can never happen again. But everything that happens twice will surely happen a third time.-- Paulo CoelhoIntroducing the JupyterLab Password Cracking Framework: For the last couple of months, I've ...

Hashcat Tips and Tricks for Hacking Competitions: A CMIYC Writeup Part 3
I want to know1and understand1But I will not1-- Hashes cracked from the KoreLogic CMIYC 2023 competitionIn the previous two posts on the CMIYC competition [Part 1, Part 2], I had focused on ...