While they do not provide the name of the wordlist, I normally use that as a starting point to begin to research where that password is found. I have used this website for Md5, NTLM (lovely old Windows passwords), and a few of their encryption tools for both the NCL games and a few other CTFs. Md5decrypt is a website that is great for various password hashes as well as various encryption types. The dictionary is enormous! Crackstation is usually where I begin, as it will tell you the wordlist it pulled from, and that allows me to work further down that same list using another tool or website.

It contains numerous wordlists, including the most common rockyou, and 219 additional gigabytes of passwords. I knew they were out there, but, there are literally hundreds of billions of passwords with their associating hashes, no database can store them all, this is seemed to be an impossible task, but I set out finding some resources to be able to work through the category.Ĭrackstation has been my favorite online tool since I discovered it in 2018.

I had never used an online tool for password cracking before. The main category that I had concerns about was, of course, password cracking. Looking at each of the categories from a high level, there was a way to complete at least half of the challenges using an online tool, or in some rare cases, by hand, so I decided to rise to the challenge. In Spring of 2019, I was traveling during the National Cyber League (NCL) Individual Games, and I didn’t have easy access to my normal computer or a place to sit myself down, so I had a brilliant idea…I’ll do this entire game from my iPad. Online Password Cracking is a bit of an odd science.

Password Cracker 4.7.5.553 downloading