Password Cracker: Wordlist Attack

A small app has leaked its user table. The passwords were not stored as text, which is good, but they were stored as fast, unsalted hashes, which is not. You have 4 leaked hashes, some MD5 and some SHA-1, and a short wordlist of likely passwords.

A hash cannot be reversed, but it can be repeated. Hash every word in the list with the same function and compare the results with the leak. Where two hashes match, you have found the password. The cracker does the hashing for you on the server, because MD5 is not built into browsers; your job is to run the list, read the matches and assign each password to its hash.

When you have recovered every password, send your answers. The server checks them and returns the flag. If some are wrong, it tells you how many are right, but not which.

Every password and user name here is invented. Think about the defence while you work: a slow, salted password hash such as Argon2id or bcrypt makes this attack far more expensive.