Cracked my own password with a $50 wordlist off GitHub

My old router admin password was lost for years until I ran that big rockyou list against a hash I pulled from the firmware. Took about 20 minutes, turned out it was "Summer2020" the whole time. Anyone else ever brute force their own forgotten credentials just to avoid a factory reset?

3 comments

3 Comments

simon_coleman23d ago

Rockyou got me too, was "password123" on an old forum account. Felt like such a dummy afterwards.

tessa_clark7423d ago

Sorry to nitpick but just to be clear, RockYou wasn't exactly a leak in the same way as other big dumps. It was a social gaming site back in 2009 and they stored passwords in plain text, so that's why we saw so many common ones like "password123" in the list. I had an old MySpace login in there too with something embarrassing like "ilovecats".

umamartin15d ago

password123" hauling me back to my old Neopets login.