You are viewing a single comment's thread.

view the rest of the comments →

ASTOR7US ago

we need ip´s and their profile names, pictures, email adresses and passwords

KolnSandwich ago

There's 2 e-mail addresses in there. 1 @yandex.ru and 1 @mail2tor.com so those are probably going to be deadends.

There may be hashed passwords I'll see if I can find it.

edit: making a pastebin with password hashes

here it is: https://ghostbin.com/paste/3mhcp

I don't know what type of hash they are. Looks like SHA256 maybe? Didn't see anything that looks like salts.

bikergang_accountant ago

To tell if they are salted we might look for another site's data (if the whole host was compromised with multiple sites). Find similar user names and compare hashes.

Multi-round salting with unique salting has been the standard for a long time. Seeing as we don't see a salt column they didn't do at least the unique salt part. Likely this could be rainbow tabled.

Get me more databases and I can at least do the first kind of analysis.

Edit: These are not salted.

oxtagg
812a6e579582e34f237775f4945c66930ada0c04
Transexual

It's sha1

pizza_merc ago

Edit: These are not salted

Hohoholeee shit

('gunafuckakid','d86eedf61ed32b588e827f7848c14293dcbabb98',0.000000000,0)

U: gunafuckakid
d86eedf61ed32b588e827f7848c14293dcbabb98
P: bananas55

Why not just store this in plaintext at this rate?

bikergang_accountant ago

Rainbowing all of them would take time unless you have a fast way of doing it. https://crackstation.net/ is useful but to do all of them you would have to script past the captcha and use jsdom to parse the results.

I'm adding it to my potential todo items today along with deploying a cdn, buying a car, and finding clearnet domains in this data, and setting up to go backpacking.

The other option is downloading the 15gigs of rainbow table. I'm not certain which is easier.