I created and manage http://www.md5decrypter.co.uk and I'm wondering it you would be interested in linking into my XML API feed so you can crack more MD5, NTLM and SHA1 hashes.

I'll give you more details of the API if your interested. This will help you crack hashes faster and reduce the load on your servers. I currently get the best success rate of any other pre-calculated, non-rainbow table website.

Wait until PowerBlade (admin) comes back from his holiday (later this month), i'll pm him a link to this post.

wow checked it out, looks good would it be possible to grab the list of recovered passwords off you, i'm working on some password analysis and the larger the recovered list the better.

A list of recovered passwords can be found here:

http://www.freerainbowtables.com/en/hashcracking/

Click the "Download" button underneath the heading "Download the FreeRainbowTables.com list of cracked passwords"

I'll be adding the cracked password lists as a download in the next release but for now, here is a link for you to download them:

http://www.md5decrypter.co.uk/passwords.zip

thanks blandyuk, greatly appreciated.

To aliby yea thanks i'm already aware of that and have already provided some preliminary analysis, including char per position of that list which can be found on the board somewhere

Hello blandyuk, do your website use database to crack hashes?
I just want to know what kind of database system do your website use if your website use database to crack hashes?
(Like MySql, MsSql or others)

It uses 65536 flat files (0000.txt, 0001.txt, ... ffff.txt). It takes the first 2 bytes (4 hex characters) of the hash and opens that file (????.txt) which is a list of passwords and just hashes them all and compares it to the given hash. I don't know if his files are actually single or double MD5. If they are double MD5 they can crack single or double MD5. There are semi easy ways to get the overall size much smaller if the passwords were generated incrementally like a brute forcer, but you have to plan out exactly what passwords are going to be in it or use a method that's slower. You can do the same for dictionaries but it's harder or less efficient.

Yeah, as Sc00bz says, it's a flat-file database using 16 directories and 65536 files, (4096 in each dir). Each file contains the first 8 chars of the hash and then the password. This is to reduce space and I figured it's all I need. Once a match is found, I simply hash the password and see if it matches the full hash that was submitted. If there is more than 1 match, I can hash 1000's per seconds anyway.

Once top of this, I have NTLM compression on the files to reduce them further.

All in all, just over 13.5 billion hashed passwords in 146GB space. All files are in projects e.g.

mixalpha-numeric 1-5
loweralpha-numeric-!$@ 6
loweralpha 7
numbers 1 - 1000000000
numbers 0000000001 - 0999999999
loads of dates variations
lastly a random database

Your site says "13,670,234,899 (over 13.5 billion)" but it should be over 14,481,705,338 as that doesn't include dates or the dictionary words.

Is this the goal, which hasn't been reached yet?

The 0 number projects actually starts from 01 so there will be 001 and 0001 and 00001 etc for all numbers. Total should be 1,111,111,111.

Dates, I'll have to get a number 4 that and the random project, about 70,000,000.

Its massive!!

I was wondering about the numbers as it seemed a little weird not to have leading zeros. You could just said "numeric 7-9 and 1000000000."

out of curiosity of the 13billion hash representations in the 65536 files what does the largest dbase file goto?