Plundering and pillaging password and passphrase plains for profit

Will Hunt

Security Fest 2025 · Day 1 · Main Stage

In this comprehensive Security Fest talk, Will Hunt, co-founder of UK-based pentesting company Insecurity and a key organizer of the Defcon Password Village, delves into advanced password and passphrase cracking techniques that extend far beyond conventional wordlist and rule-based attacks. Titled "Plundering and Pillaging Password and Passphrase Plains for Profit," the presentation explores a fascinating array of strategies designed to uncover passwords that resist typical cracking methodologies. Hunt’s insights are particularly valuable for pentesters seeking to maximize their recovery rates and for defenders aiming to understand the full spectrum of threats to user credentials.

Watch on YouTube