http://tweedge32j4ib2hrj57l676twj2rwedkkkbr57xcz5z73vpkolws6vid.onion/2021/disclosing-wsdot-sqli
Perennial favorites include wsdot, wsdot123, wsdot1234, and wsdot[year] (as well as all-caps versions of these). 72,949 user records used for web-based vehicle permit management. This included full name, email, and hashed passwords (SHA256 with a 256-bit salt, hashcat mode 1440: sha256($salt.utf16le($pass)) ).