Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [day] [month] [year] [list]
Date: Sun, 25 Apr 2010 13:07:33 +0400
From: Solar Designer <>
Subject: [openwall-announce] JtR 1.7.5-jumbo-3; phpass 0.3; password recovery updates


This is to announce three news items at once.  I'll start with the latest:

1. The jumbo patch for John the Ripper 1.7.5 has been updated to
revision 3.  Most notably, this adds documentation on LM/NTLM
challenge/response authentication cracking (doc/NETNTLM_README),
improves the script, and adds the "--config" option to
"john".  These changes have been contributed by JoMo-Kun:

2. There's a new revision of our PHP password hashing framework -
phpass 0.3:

This revision no longer requires the getmypid() PHP function (which a
few shared hosting providers disable) and it recognizes the "$H$" hash
encoding prefix (as used by phpBB3).

Also, the size of an array in the C reimplementation, which is unused by
the framework itself and is meant for testing the correctness of the PHP
implementation only, has been corrected.  (Obviously, I was careless
about that code; I should have reviewed it when I decided to include it
along with phpass.)

I'd like to thank Christian von Schultz for reporting the bug.

3. Rixler Software's password recovery products for Word, Excel, and
some other Microsoft Office documents have been added to Openwall's
collection of password recovery resources.  These new products use an
innovative approach where the 40-bit encryption key gets cracked within
seconds on Rixler's server, yet the actual "document" is not "revealed"
to the server (only some technical information is sent to the server).

At the same time, ElcomSoft's Microsoft SQL Server password change/reset
and WiFi WPA/WPA2-PSK password security auditing products (using the
processing power of GPUs of up to four modern NVidia or ATI graphics
cards when available!) have also been added to the collection:



Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ