1M unhashed from Canva
by ggwp2 - November 06, 2019 at 11:04 AM
#1
Angel 
Download Hidden Content
You must register or login to view this content.
#2
EmailPass or UserPass?
#3
email:pass

$ cat harass | head -n 20
#4
kooooooooooi hoooooi du
#5
Nice post you got here Will check later.
This forum account is currently banned. Ban Length: Permanent (N/A).
Ban Reason: Mass Leeching
#6
This seems very suspicious to me. At the moment I am posting, hashes.org is reporting 0.13% cracked passwords. That would be about 180k passwords, seems a bit of a stretch to me that someone has 1m cracked. Especially when we know from another thread that someone is distributing the canva database without hashes in it and a lot of people looking for it. Can anyone confirm any credentials in the database?
#7
you can compare email address with the hash stripped database if you want
#8
(November 07, 2019 at 12:03 AM)ggwp2 Wrote: you can compare email address with the hash stripped database if you want

What would that prove?
#9
Im pretty sure it is real. There are roughly 1.2 million accounts here, but a lot of then are duplicates so when you merge the two files in the zip and remove the duplicate lines, there is roughly 650k lines left. Surprisingly some of them arent duplicates with the earlier 100k email pass on this forum, so when you merge that in and remove duplicates you get 720k unhashed passwords.
#10
(November 07, 2019 at 12:17 AM)danstew2019 Wrote:
(November 07, 2019 at 12:03 AM)ggwp2 Wrote: you can compare email address with the hash stripped database if you want

What would that prove?

Well because then you know the plaintext password that should go with the hash. Therefore you can then use the plains as a wordlist to crack the hashes and determine if the plains really do match up with the hashes.
#11
(November 07, 2019 at 12:17 AM)danstew2019 Wrote:
(November 07, 2019 at 12:03 AM)ggwp2 Wrote: you can compare email address with the hash stripped database if you want



What would that prove?

Because in the database that was shared on the forum, there are only email addresses

(November 07, 2019 at 03:43 AM)Tempuser Wrote: Im pretty sure it is real. There are roughly 1.2 million accounts here, but a lot of then are duplicates so when you merge the two files in the zip and remove the duplicate lines, there is roughly 650k lines left. Surprisingly some of them arent duplicates with the earlier 100k email pass on this forum, so when you merge that in and remove duplicates you get 720k unhashed passwords.

mh indeed, I forgot to sort, thanks
yes, they were cracked before these 100k hash
#12
(November 07, 2019 at 07:05 AM)Eb0laVixen Wrote:
(November 07, 2019 at 12:17 AM)danstew2019 Wrote:
(November 07, 2019 at 12:03 AM)ggwp2 Wrote: you can compare email address with the hash stripped database if you want

What would that prove?

Well because then you know the plaintext password that should go with the hash. Therefore you can then use the plains as a wordlist to crack the hashes and determine if the plains really do match up with the hashes.

The canva database hasnt been leaked though has it? Isnt he reffering to the canva leak on this forum, that turned out not to include the hashes but only the email adresses and some other data?

Possibly Related Threads…
Thread Author Replies Views Last Post
CSV 12 Million Canva: Tier 5 Countries Data (USA, UK, CA, AUS NZ) Cleaned martinmarkben 22 8,615 June 12, 2021 at 05:25 PM
Last Post: muri12
CrackingForum.com 469550 Email:Pass Unhashed tyandriaj 8 4,271 August 23, 2020 at 12:08 PM
Last Post: zedlow
Medical Website 955 users(ID,email,password) Unhashed + Admin Login/pass rytsoft 5 2,924 July 26, 2020 at 08:07 PM
Last Post: aminn22

 Users browsing this thread: 1 Guest(s)