password leaked
 

RockYou2024: 10 billion passwords leaked in the largest compilation of all time

Researchers discovered what appears to be the largest password compilation with a staggering 9,948,575,739 unique plaintext password

������ Source:
https://cybernews.com/security/rockyou2024-largest-password-compilation-leak/

������ Source archive:
https://disk.yandex.ru/d/1spMBmxcEnN95g
https://s3.timeweb.cloud/fd51ce25-6f95e3f8-263a-4b13-92af-12bc265adb44/rockyou2024.zip

magnet:?xt=urn:btih:4e3915a8ecf6bc174687533d93975b1ff0bde38a

Is this anything more than the results of plaintext leaks and all hash cracked passwords from prior leaks of the past years? My guess is rainbow table attacks have allowed passwords up to certain sizes and with certain character sets to be cracked in mass due to data leaks. The source of this dB was not clear.

Not really.
Only some 10% of the passwords are new. Most are old ones from the 2021 leak. That is why it did not make big news this time.
Not worth the 45GB download.

https://cybernews.com/security/rockyou2024-largest-password-compilation-leak/

"The file with the data, titled rockyou2024.txt, was posted on July 4th by a hacker forum user ObamaCare."
these passwords came from a mix of old and new data breaches. Based rockyou2021.

You can check if your data was exposed in historic data breaches using the Cybernews data leak checker below.
https://cybernews.com/personal-data-leak-check/


""

https://specopssoft.com/blog/rockyou2024-analysis-password-leak/

Here is an analysis article, I also downloaded and analysis it myself. It was similar to the description in this article. I felt that it was not worth downloading and using, and the data was very messy.

When unpacked, it takes up 145 GB :D

And trying to find the password for one WPA.hash with dualGPU (RTX4080 and RTX 4070 Ti) is estimated at 90 minutes.

Can someone provide approximate times for the better cards? For example, RTX4090.

try Nvidia RTX50 :)

2 month for RAR

2 months on AES? Really?

Yes. I tried with passware 2022 and for password bigger than 30 till 128 in lenght only processor runs about 180 p / s. I do knot why only for shorts passwords video card works.

maybe because it is doing a dictionary attack, not searching the full key space

How to search the full key space ?

rarhashes.txt
$RAR3$*1*bd8e558b92fd453c*cebb2d59*48*34*1*79c0a77fb8f9b042c07c78191c25f3b0b8fd4b8514868415341716ba8fe304fbbc4372df4cdc1757cff273c972f9df1d*35

hashcat -m 23800 rarhashes.txt rockyou.txt

?

"No such file or directory"

hashcat -m 12500 rarhashes.txt rockyou.txt

"Token length exception"

it is not realistic searching the full key space for 128 bit key length
only in case of 40 bit long keys like Acrobat 2-4 or Office 97 documents

download https://disk.yandex.ru/d/1spMBmxcEnN95g and desarchive text file near hashcat.exe

rename text rockyou2024.txt to rockyou.txt

create a rarhashes.txt and copy inside the long hash and save

try again