Introduction Content Security Policy (CSP) is a powerful but sometimes confusing tool to secure self-hosted and SaaS web applications alike. In this blog post I hope to illuminate some challenges and possible soultions dependent on specific situations. One such situation is if you’ve already built and deployed a complex web application without a CSP. Tough news is it’s going to be challenging to implement… but we are going to target that specific situation. ...
My Top Hash-Cracking Wordlists and Rainbow Tables (Updated July 29 2025) Introduction Password cracking often relies on wordlists and rainbow tables. This post contains some of my favorite wordlists and rainbow table sources. Top Wordlists Wordlist Approx. size / entries (where available) Notable features / uses Sources RockYou & RockYou2024 RockYou.txt: 32 M; RockYou2024: ~9.95 B unique Real-world passwords from breaches; standard for Hashcat/John the Ripper. SecLists Collection (~350 GB raw) Multi-purpose: passwords, user names, URLs, payloads. CrackStation 1.49 B words (15 GB); 64 M human-only (684 MB) Aggregates every leak & Wikipedia; cracks ~30 % of online submissions. Probable Wordlists ~2 B sorted by popularity Ranked by occurrence frequency across leaks; helps avoid common passwords. Weakpass Sizes range 2 KB–104.8 GB Organized by algorithm/type: MD5, NTLM, sha512crypt, WPA2. Top Rainbow Tables Table Source Hash Type(s) Charset & Length Total Size Success Rate / Notes Sources Ophcrack XP tables LM (8 chars) Alphanumeric, special (select sets) XP free: 17 GB; Vista free: 11.9 GB XP crack ~99.9 %; Vista ~99 % RainbowCrack LM, NTLM, MD5, SHA1 Various charsets (1–8 chars) Depends on tables; uses RTI format Fast time-memory trade-off for unsalted hashes FreeRainbowTables NTLM, MD5, SHA-1, MySQLSHA1, LM Mixalpha-numeric-space, symbol sets, lengths up to 14 NTLM: 818 GB; MD5: 1.18 TB; SHA-1: 97 GB; LM: 4.3 TB Covers unsalted hashes; community-seeding via BitTorrent PassMark OSForensics disk MD5, LM, NTLM, SHA1 Loweralphanumeric 1–7 chars; extended sets 1–12 chars ~3.1 TB total (collection) HalfLM/NTLM require external tools; integrates with OSForensics Crack.sh DES keyspace (2^56) Full DES key, FPGA-accelerated 6 TB NVMe storage; 12×512 GB table ~25 s average crack time; 99.5 % success