Rules
KoreLogic used a variety of custom rules to generate the passwords. These _same_ rules can be used to crack passwords in corporate environments. These rules were originally created for the tool John the Ripper. KoreLogic performed a very rough translation to rules that can be understood by the 'hashcat' tool. The rules below can be downloaded, placed in hashcat's /rules/ directory and accessed via the command line using the -r command line option. This is _not_ a complete list of all rules that was used for the contest, but a subset of rules that were easy to convert to hashcat format.Note: Many of these rules can be rewritten or condensed using OCLHashCat
Click here for a .tar.gz file of all the rules listed below in one large file
Or click on the rules listed before to view/download the individual rules:
KoreLogicRulesAdd1234_Everywhere.rule
KoreLogicRulesAdd2006Everywhere.rule
KoreLogicRulesAdd2010Everywhere.rule
KoreLogicRulesAddDotCom.rule
KoreLogicRulesAddJustNumbersLimit8.rule
KoreLogicRulesAddOnes.rule
KoreLogicRulesAddShortMonthsEverywhere.rule
KoreLogicRulesAppend1_AddSpecialEverywhere.rule
KoreLogicRulesAppend2Letters.rule
KoreLogicRulesAppend4Num.rule
KoreLogicRulesAppend6Num.rule.gz
KoreLogicRulesAppend6NumbersSpecial.rule.gz
KoreLogicRulesAppendCurrentYearSpecial.rule
KoreLogicRulesAppendJustNumbers.rule
KoreLogicRulesAppendMonthCurrentYear.rule
KoreLogicRulesAppendMonthDay.rule
KoreLogicRulesAppendNumberNumberSpecialTwice.rule
KoreLogicRulesAppendNumbers_or_Specials_PrependLetter.rule.gz
KoreLogicRulesAppendSpecial4num.rule.gz
KoreLogicRulesAppendSpecialNumberNumberNumber.rule.gz
KoreLogicRulesAppendYears.rule
KoreLogicRulesDevProdTestUAT.rule
KoreLogicRulesL33t.rule
KoreLogicRulesMonthsFullPreface.rule
KoreLogicRulesPrepend2NumbersAppend2Numbers.rule
KoreLogicRulesPrepend4LetterMonths.rule
KoreLogicRulesPrependCAPCAPAppendSpecial.rule
KoreLogicRulesPrependDaysWeek.rule
KoreLogicRulesPrependHello.rule
KoreLogicRulesPrependJustSpecials.rule
KoreLogicRulesPrependMonthDayYear.rule
KoreLogicRulesPrependNumNum.rule
KoreLogicRulesPrependNumNum3LetterMonths.rule
KoreLogicRulesPrependNumNumNum.rule
KoreLogicRulesPrependNumNumNumNum.rule
KoreLogicRulesPrependNumNumSpecial.rule
KoreLogicRulesPrependRockYou50000.rule.gz
KoreLogicRulesPrependSeason.rule
KoreLogicRulesPrependSpecialSpecial.rule
KoreLogicRulesPrependYears.rule
KoreLogicRulesReplaceLetters.rule
KoreLogicRulesReplaceLettersCaps.rule
KoreLogicRulesReplaceNumbers.rule
KoreLogicRulesReplaceNumbers2Special.rule
KoreLogicRulesReplaceSpecial2Special.rule