So Long, and Thanks For All the Clock Cycles

20 Sep 2009

Presented at Hacker Halted 2009 in Miami, this talk revealed researh, development, and POC deployment of a distributed / crowd-sourced password cracker that gathers clock-cycles through XSS vulns. Utilizing a Java applet and Django backend, password cracking chunks are distributed to and processed by unsuspecting clients. Includes crowd-pleasing admin interface written in Flex.