Results of a Password Cracking Contest in My Security Class (Fall 2016)

For my Introduction to Computer Security class that I teach once an academic year since 2012, I give a month-long lab in October to crack as many passwords as possible. For this year’s contest (opened on October 3, 2016), I used three different hash types: NTLM, MD5, and SHA-512. The password hashes:

bigbear:$1$xJJUvMhn$PnAhcJUFtPrqcgPLTfkH6/:1012:1012:,,,:/home/bigbear:/bin/bash
blackbear:$6$LbFQXixl$Ozskf08sMdjuk2IDgpwwqwTtVPJEid3euQBrxtzsNqiif4wuP7s/CLe7PHeuVmDJLVan8lMXhmqPMvR7Zztll.:1003:1003:,,,:/home/blackbear:/bin/bash
blinkybear:"":"":AAD3B435B51404EEAAD3B435B51404EE:E5E47C3D94AF02C2798FBE510DF7F01B
cacabear:$6$D8RyIoSq$T6/L8Nt56.AEf5YZ8oc99sX5WvLf6V5guBWQGr173oDPFSJdxCvCy7qocmLjr9KA7/tyxkQG5pMXtpymOfVRT1:1001:1001:,,,:/home/cacabear:/bin/bash
chicagobear:$6$ZiRsvy9t$tSJPZWkuN/osPl3Ai21t13E/5JLpPote/LPFCU/EUggZB4IiLHHjT.b.zC2Sy8z.Ufh9s7CKbyL3CH4zct1KM/:1008:1008:,,,:/home/chicagobear:/bin/bash
cocobear:"":"":AAD3B435B51404EEAAD3B435B51404EE:3C7E2D527B77687A4681B0400F9D9F25
cozybear:$1$8RT.TaL6$gNsnjq9LF2yjgsuBC/QZ0/:1003:1003:,,,:/home/cozybear:/bin/bash
crazybear:$1$8yZuL1Bo$CFgDFz92z3la0nXa2u/Dp/:1004:1004:,,,:/home/crazybear:/bin/bash
daisybear:$1$YGX1Xwac$gmreBVss7axOOcd0uTOc.0:1008:1008:,,,:/home/daisybear:/bin/bash
fancybear:"":"":AAD3B435B51404EEAAD3B435B51404EE:C0112B9DB3187CD752A54AAA23F5221C
foofoobear:$1$XCzh81qm$yhPc5ZUrD/Hisol1pmW061:1007:1007:,,,:/home/foofoobear:/bin/bash
fozziebear:$1$syLzkzPE$AC2byibcPyEYOQHOTOAIB0:1006:1006:,,,:/home/fozziebear:/bin/bash
grizzlybear:$6$dOczf73V$QeJe7NqQwY01dfFHVBimqFuQONSswXsQjN7X9cdADLgBQIl5OHiC58sEH6gSSMU8jMOBrOXCyI8B.VCQD3Bs00:1004:1004:,,,:/home/grizzlybear:/bin/bash
jojobear:"":"":AAD3B435B51404EEAAD3B435B51404EE:6BE5E7CBB322E62348285DD15F61C674
pandabear:$6$/PgVCL9l$A35Mq3OUtCAH6.itt939KnAfedwLnixmIs7Culx9OjolS0WPIf2eO/a4w0GwCn1ytjaH5WgEz4LPRphmhtz6Q.:1005:1005:,,,:/home/pandabear:/bin/bash
peachbear:$1$hKbWRBKb$Z6u6bSrI/jjs21kCGUeYW1:1009:1009:,,,:/home/peachbear:/bin/bash
pedrobear:$1$Mc99h/YO$wyXQUl4PcL3445YIorKPB0:1005:1005:,,,:/home/pedrobear:/bin/bash
slothbear:$6$7HPLjgWS$7PKyhvnoEXK6aIFmMRlBJ/hnh26EoH/BWe7mF1nuOc7aEW/05gcrzadYsxMpIr9Q2aMRWAK5V4jidEGOpFnDN.:1006:1006:,,,:/home/slothbear:/bin/bash
smokeybear:$6$nZvgK5hA$IIzI1X3pQyqw6HHifJvzmFbqy4YsvfWEUr7ziDxTFAskM0MgWcLnNe2GytOg9fuH2Q8Fj6NqvATynl4OTOln3.:1007:1007:,,,:/home/smokeybear:/bin/bash
teddybear:$1$Lz.US6gS$uzZW7jqRMJyNSImlMSmxs/:1011:1011:,,,:/home/teddybear:/bin/bash
willybear:"":"":AAD3B435B51404EEAAD3B435B51404EE:D0B9293D8D9B19C2521035CAD9EEA62F
yetibear:$6$ymHxOcle$Fld.1NstIFNUj0isoNreqAiFDz9lKmsCW4ZHE8MLljOLh7CCwTLsj8AH/qu3bK9pMeMWyIOfvZZyzqVsVxAZ.0:1002:1002:,,,:/home/yetibear:/bin/bash
yogibear:"":"":AAD3B435B51404EEAAD3B435B51404EE:A742EEEDC81F844277927E3CE83817D7
yolandabear:$1$B90md6v6$L78BfqeVKpj2scI18FT1y1:1010:1010:,,,:/home/yolandabear:/bin/bash

I combed through the submissions today: 64 total submissions (students can submit multiple times but only the last submission will count). The answers:

bigbear:!Liverpool (MD5) => 11 students cracked this
blackbear:KDI9quo8 (sha512) => 0 students cracked this
blinkybear:EdRojas (NTLM) => 54 students cracked this
cacabear:uc12SL (sha512) => 0 students cracked this
chicagobear:ch!pmunks (sha512) => 2 students cracked this
cocobear:XQ\Y0VJsk (NTLM) => 0 students cracked this
cozybear:gpxkr4 (MD5) => 3 students cracked this
crazybear:c1jkfp5 (MD5) => 0 students cracked this
daisybear:Booger  (MD5) => 62 students cracked this
fancybear:ECX[0Wr (NTLM) => 3 students cracked this
foofoobear:k/<vQC (MD5) => 0 students cracked this
fozziebear:w7b1vcz1a (MD5) => 0 students cracked this
grizzlybear:@Pp|3 (sha512) => 19 students cracked this
jojobear:3scrow (NTLM) => 57 students cracked this
pandabear:AshleyMadison (sha512) => 15 students cracked this
peachbear:ncc1701a (MD5) => 58 students cracked this
pedrobear:kghu2d0m (MD5) => 0 students cracked this
slothbear:OHMYGODTHEYKILLEDKENNY (sha512) => 5 students cracked this
smokeybear:allyourbasesarebelongtous (sha512) => 0 students cracked this
teddybear:kafka21 (MD5) => 32 cracked this
willybear:M@rc0P0l0 (NTLM) => 35 students cracked this
yetibear:7QunlW8 (sha512) => 0 students cracked this
yogibear:u1-1$A#Q (NTLM) => 0 students cracked this
yolandabear:jabron1 (MD5) => 52 students cracked this

The winner cracked 13 of the passwords. The student’s haul:

bigbear:!Liverpool
blinkybear:EdRojas
chicagobear:ch!pmunks
cozybear:gpxkr4
daisybear:Booger
fancybear:ECX[0Wr
grizzlybear:@Pp|3
jojobear:3scrow
pandabear:AshleyMadison
peachbear:ncc1701a
teddybear:kafka21
willybear:M@rc0P010
yolandabear:jabroni1