Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Thu, 10 Mar 2011 00:36:38 +0100
From: Bucsay Balázs <earthquake@...on.hu>
To: john-dev@...ts.openwall.com
Subject: Re: mscash broken for ages?

Hi!

Last week I wrote a mail to the list, with the same problem... No answers.
The problem is with the jumbo patch. The patch makes some modification
in the loader.c.
If you want to load an mscash hash, with the internal representation,
then its making a transformation (probably who made the loader.c patch,
didnt read the mscash format's code).
I made some modification, for my code in the next function:
static void ldr_load_pw_line(struct db_main *db, char *line)
the old was:
                if (db->format ==
&fmt_mscash)                                 
               
{                                                              
                        piece = (char *) mem_alloc(strlen(login) +
strlen(cipher
                        sprintf(piece, "M$%s#%s", login,
ciphertext);          
                }
the new is:

                if (db->format == &fmt_mscash)
{                               
                        if ((ciphertext[0] != '#') && (ciphertext[1] !=
'$'))  
                       
{                                                      
                                piece = (char *) mem_alloc(strlen(login)
+ strle
n(ciphertext) +
4);                                                            
                                sprintf(piece, "M$%s#%s", login,
ciphertext);  
                       
}                                                      
                       
else                                                   
                       
{                                                      
                                piece =
ciphertext;                            
                        }
                }

This is an older jumbo patch, maybe the 1.7.6-jumbo-3. But the present
jumbo patch is alike the old one.

I hope it could help you.

Balázs


On 10/03/11 00:13, magnum wrote:
> No wonder I had problems with utf8 support for mscash, it doesn't even
> seem to work with a bog standard john, using ascii only:
>
> $ cat test.hash
> TEST1:M$123#4d677d80deb78a361064337b44d01933
> TEST1:M$test1#00e1e69cf8fb720f0b721b7ad4ffc3c6
> test1:M$test1#64cd29e36a8431a2b111378564a10631
>
> Note that the last line exactly matches the format test below (and the
> tests are ok!)
>
> $ grep test1 ../xx/src/mscash_fmt.c
>     {"M$test1#64cd29e36a8431a2b111378564a10631", "test1" },
>
> $ ./john-jumbo12e test.hash -si
> Loaded 3 password hashes with 2 different salts (M$ Cache Hash
> [Generic 1x])
> guesses: 0  time: 0:00:00:00 100.00% (ETA: Thu Mar 10 00:06:13 2011)
> c/s: 815466  trying: B\test1B( - B\test1B\
>
> $ ./john-1.7.6-jumbo11 test.hash -si
> Loaded 3 password hashes with 2 different salts (M$ Cache Hash
> [Generic 1x])
> guesses: 0  time: 0:00:00:00 100.00% (ETA: Thu Mar 10 00:05:55 2011)
> c/s: 927944  trying: B\test1B( - B\test1B\
>
> $ ./john-1.7.6-jumbo7 test.hash -si
> Loaded 3 password hashes with 2 different salts (M$ Cache Hash
> [Generic 1x])
> guesses: 0  time: 0:00:00:00 100.00% (ETA: Thu Mar 10 00:05:23 2011)
> c/s: 868077  trying: B\test1B( - B\test1B\
>
> Has this ever worked? Am I doing something wrong?
>
> magnum

Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ