GPU Cracking: Rebuilding the Box

Analyzes cracked NTLM domain hashes from a year of penetration tests to publish the top ten password masks, dominated by seasonal patterns like Spring15 and Fall2015.

NetSPI details its GPU cracking methodology on a 1,000-hash sample: crack legacy LM hashes first, run dictionary attacks with rules, then apply the 43 most common mask patterns for quick wins.

NetSPI built a GPU cracking rig with four Radeon HD 7950 cards running oclHashcat, hitting about 25 billion NTLM guesses per second, and shares hardware, cooling, and cabling lessons.

A guide to CUDA GPU password cracking in Kali: blacklist nouveau, install drivers and the CUDA toolkit, verify with nvidia-smi and benchmark Hashcat, with notes on GPU instances on AWS P2-series.

NetSPI shows why .NET SecureString still leaks passwords in memory via NetworkCredential, and demonstrates safer login handling using pinned mutable byte arrays instead of immutable strings.

NetSPI offers three best practices for making third-party pentest data compatible with security orchestration, since static PDF reports and custom formats hinder automated correlation and remediation.