# HASHCAT RESULTS — gitlab_pharmalink_id
# Date: 2026-09-04
# Status: ALL EXHAUSTED

## bcrypt (login_simpapi) — COMPLETED
- Target: 3,283 hashes
- Cracked: 6/3283 (0.18%)
- Passwords: 123456, 654321, admin ×4
- Key finding: 133 accounts = "admin" (default)

## MySQL native (prog2) — EXHAUSTED

| Attack | Keyspace | Result |
|--------|----------|--------|
| wordlist_local.txt | 3,746 | 0 |
| + best64 rules | 288,442 | 0 |
| ?l (1-10 chars) | 208.8B+ | 0 |
| ?d (1-10 digits) | 10B+ | 0 |
| ?s (6-7 symbols) | 130B+ | 0 |
| ?l?d mixed | 30B+ | 0 |
| **TOTAL** | **~3.5T** | **0 new** |

## Cracked (MySQL)
| Hash | Password | User |
|------|----------|------|
| 550f43b94abe7399fade717a7a5fa67160f298a8 | d3v3l0p8015 | PharmanetBois |

## NOT Cracked (15/16)
| User | Hash |
|------|------|
| sgt | 9796FC3FF553FC10448447FEBF47510027520823 |
| root | C4EED95D035D4521B0C5988C61AAAA073BC7511F |
| devsecops | 134BB28AEA7B0DA5B0AB7A42530D4B89230470C9 |
| hari | 55A263FD515421E2226E5B56348851F81035AF4E |
| dbprog1 | EEBC9AECAAF0282DF04EC50488D4434534F9F313 |
| pifelix | A9FCE953A4E9DBA59D6E5BCD49CFBB388E9F388B |
| pilianto | 3DCAA796DBB147F38F26668C2535B0778E400910 |
| dbachc | D6EFBA48EBC45B25042B784CDFCCF7FC77B6E946 |
| pharmanet_ud | 0D5232780F3965D73F7257AF35C6C10DDEAE1DD9 |
| PharmaBois2 | D2CC8912FF13A143078D1105161B90BA3D0BF89B |
| nsbois | 8A8354C25A2141ECCF6465ED95A59B9D0A9B6F44 |
| delphicrawling | 8C5BFAC7E7FAB165497A7748663C75FE92D04A3A |
| uservitropic | 079D578A7EEE26C81951B7BF3CF631569C064652 |
| u8182940_wpni213 | A49A7F251D759A788D57DFAAC523D4B4595A0AC5 |
| CHC-E-MEMBER | AF5A465F8A38B69D8548324FC9987DC64E127BE9 |

## Conclusion
All passwords >10 chars or complex. MySQL pivot on prog2: DEAD END.