

The problem for crackers was that they were hashed using bcrypt and all but a fraction of them were too strong to break in any kind of reasonable time frame. If you remember a few years ago there was a breach of the Ashley Madison website and 36 million password hashes were leaked. Unlike the other hash algorithms we’ve encountered so far bcrypt is specifically designed to be slow to crack, especially for GPUs, and you can see that reflected very poignantly in the screenshot below. John -format=bcrypt -wordlist=/usr/share/wordlists/rockyou.txt hash1_4.txt This will download the current release of the password lists. Hashcat -m 3200 hash1_4.txt /usr/share/wordlists/rockyou.txt Seclists can be installed inside Kali Linux using the apt install seclists command. Hash: $2y$12$Dwt1BZj6pcyc3Dy1FWZ5ieeUznr71EeNkJkUlypTsgbX1H68wsRom
