|
|
|
Software you can find here (what's new?):
|
|
October 23, 2024
LKRG 0.9.9 is out,
adding support for new Linux kernels 6.11+, 6.10.10+, 5.10.220+, as well as new CentOS Stream 9 (upcoming RHEL 9.5).
May 14, 2024
We've just
published the slides of Solar Designer's OffensiveCon 2024 keynote talk
"Password cracking: past, present, future".
March 4, 2024
We've just
published the slides of Solar Designer's talk
"Linux kernel remote logging: approaches, challenges, implementation" from BSidesZagreb 2024.
February 28, 2024
LKRG 0.9.8 is out,
adding a remote kernel message logging capability.
September 14, 2023
LKRG 0.9.7 is out,
adding support for Linux 6.4 to 6.5.x and hopefully beyond, as well as for new RHEL 9.1 and 9.2 kernels.
June 25, 2023
passwdqc 2.0.3 is out,
adding Cygwin support, pkg-config file, and assorted minor changes.
Also available is a corresponding update of passwdqc for Windows,
adding password policy bypass for system-generated passwords for KRBTGT accounts.
Finally, the pre-generated leaked password filter files have been updated (quite a while ago) to include HIBP v8,
encoding the 847+ million unique passwords (from billions of accounts) in a 3.3 GiB (3.5 GB) file.
More news
|
Openwall software releases and other related files are also available from the
Openwall file archive and its
mirrors.
You are encouraged to use the mirrors, but be sure to verify the
signatures on software you download.
The more experienced users and software developers can browse through the source code for most pieces of Openwall software
along with revision history information for each source file in our
GitHub organization and on our
CVSweb server.
We publish articles,
make presentations, and
offer professional services.
We also maintain a
wordlists collection
for use with password crackers such as
John the Ripper
and with password recovery utilities.
Finally, we host community resources such as
mailing lists and
wiki
for users of Openwall software
and for other Open Source and computer security folks.
If you would like to be notified of updates to this website and the packages
hosted here, please subscribe to the announcement mailing list
by entering your e-mail address below or by sending an empty message to
<announce-subscribe at lists.openwall.com>.
You will be required to confirm your subscription by "replying"
to the automated confirmation request that will be sent to you.
You will be able to unsubscribe at any time and we will not use your e-mail
address for any other purpose or share it with a third party.
The list traffic is very low (typically 1 to 5 messages a month).
You can review past announcements here.
You can also
follow us on Twitter.
October 23, 2024
LKRG 0.9.9
is out,
adding support for new Linux kernels 6.11+, 6.10.10+, 5.10.220+, as well as new CentOS Stream 9 (upcoming RHEL 9.5).
May 14, 2024
We've just
published the slides of Solar Designer's OffensiveCon 2024 keynote talk
"Password cracking: past, present, future".
March 4, 2024
We've just
published the slides of Solar Designer's talk
"Linux kernel remote logging: approaches, challenges, implementation" from BSidesZagreb 2024.
February 28, 2024
LKRG 0.9.8
is out,
adding a remote kernel message logging capability.
September 14, 2023
LKRG 0.9.7
is out,
adding support for Linux 6.4 to 6.5.x and hopefully beyond, as well as for new RHEL 9.1 and 9.2 kernels.
June 25, 2023
passwdqc 2.0.3
is out,
adding Cygwin support, pkg-config file, and assorted minor changes.
Also available is a corresponding update of
passwdqc for Windows,
adding password policy bypass for system-generated passwords for KRBTGT accounts.
Finally, the pre-generated leaked password filter files have been updated (quite a while ago) to include HIBP v8,
encoding the 847+ million unique passwords (from billions of accounts) in a 3.3 GiB (3.5 GB) file.
March 2, 2023
John the Ripper in the cloud has been
updated
to use the latest JtR jumbo on freshly updated Amazon Linux 2 with a newer NVIDIA GPU driver.
Many new AWS instance types are now supported.
December 14, 2022
LKRG 0.9.6
is out,
adding support for Linux 6.1, RHEL 8.7, current CentOS Stream 9 (upcoming RHEL 9.2),
along with a variety of other changes for portability, robustness, and extra security checks.
August 1, 2022
LKRG 0.9.5
is out,
adding support for new longterm kernels 5.10.133+ and reworked support for OverlayFS (Docker).
July 22, 2022
LKRG 0.9.4
is out,
featuring more consistent log messages suitable for both automated analysis and human consumption,
as well as adding support for more longterm Linux kernels and for the OpenRC init system.
April 21, 2022
LKRG 0.9.3
is out,
adding support for latest Linux kernels,
latest CentOS Stream 8/9 and upcoming RHEL 8.6+, openSUSE Leap, and loading into older Xen PV guests.
December 29, 2021
LKRG 0.9.2
is out,
adding support for new Linux kernels, and assorted bug fixes and enhancements.
April 27, 2021
LKRG 0.9.1
is out,
addressing various issues reported against the 0.9.0 release.
April 12, 2021
LKRG 0.9.0
is out,
with support for new Linux kernels, optionally building LKRG in kernel tree,
Continuous Integration (boot tests in VMs, including with Ubuntu's daily updated mainline kernels), and much more.
April 4, 2021
passwdqc 2.0.2
is out,
improving the formatting of auto-generated policy descriptions and adding the libpasswdqc(3) manual page.
March 10, 2021
Two minor updates:
passwdqc
2.0.1 offers improved auto-generated password/passphrase policy descriptions.
scanlogd
2.2.8 builds cleanly with recent glibc.
February 18, 2021
passwdqc 2.0.0
is out,
adding support for external wordlist, denylist, and binary filter files (improved cuckoo filters).
January 11, 2021
After 10 years since the previous release, we've just
released
version 1.2 of
tcb,
implementation of our alternative password shadowing scheme.
Changes include libxcrypt and recent glibc support, translated (non-English) messages support, and dropping of NIS/NIS+ support.
June 25, 2020
LKRG 0.8
is out,
adding support for latest Linux kernels, 32-bit ARM (LKRG 0.7 already had 64-bit), Raspberry Pi 3 & 4, improving scalability,
performance, and tradeoffs, adding the notion of profiles, new documentation, Phoronix Test Suite benchmarks, and much more.
December 25, 2019
passwdqc 1.4.0
is out,
adding optional non-English messages and Linux-PAM audit support.
July 21, 2019
LKRG 0.7
is out,
adding experimental support for ARM64 (AArch64) and grsecurity,
support for Linux kernels 5.1 and 5.2 (and hopefully beyond),
greater SMEP enforcement, and much more.
April 12, 2019
John the Ripper 1.9.0 core
is out.
Stay tuned for the 1.9.0-jumbo-1 release and announcement, which will be "the real one".
February 19, 2019
LKRG 0.6
is out,
adding experimental poor man's Control Flow Integrity support and much more.
News archive (since 2001)
10930407