[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 11 Sep 2012 00:19:09 +0200
From: magnum <john.magnum@...hmail.com>
To: john-dev@...ts.openwall.com
Subject: Re: oldoffice
On 2012-09-11 00:11, Rich Rumble wrote:
> On Mon, Sep 10, 2012 at 6:02 PM, magnum <john.magnum@...hmail.com> wrote:
>> $ ../run/john test2.in -show=left
>> XP-Office97-2000_myhovercraftisfullofeels_.xls:$oldoffice$0*828a2bd297901e027259a1e551f3f94d*04743711b2edaf3bec6ea7114858942e*9b99499b165944977a2acd08021e9ae4
>> XP-Office97-2000_myhovercraftisfullofeels_.doc:$oldoffice$1*92a395296a1e7c9922f29e45f3efbaf7*dcee41ef537674576b8ebb31434c4034*441d1ae1c2416b384787ab90966b4e40
>> 2007-Office97-2000_myhovercraftisfullofeels_.dot:$oldoffice$1*990dd44f1c177328961d2561fe9fea8c*c0d2be728c6a4f33d097de13cfb38773*12412adcaa052acb1cb53301a7a93c2b
>> 2007-Office97-2000_myhovercraftisfullofeels_.doc:$oldoffice$1*984961bc72f6e7937c372bcac57a5da4*871d27a553fd4aa1c93dc4a3ddabfbf1*725898afef7256b232fdf423ec12adbb
>> 2003-Office97-2000_myhovercraftisfullofeels_.doc:$oldoffice$1*2f6e1e4087a28311d8473098f79367d6*e77706d7d89713b0afa90124e41ad5ab*0ad105395460b7eb8282de51c1189695
>> Libre-97-2000_myhovercraftisfullofeels_.xlt:$oldoffice$0*af8533d0c3ff51332d043499a5086a78*ff32fec60e2a1dde034ecba6961b8e2d*5602b0f69c38b70f65919c743387b38b
>> Libre-97-2000_myhovercraftisfullofeels_.xls:$oldoffice$0*8bde8531d53f7564efaa897c12a6e060*0552b48e7197cfa5655c0ed5afd20e7d*35131e9ac3141072e5608a749685f459
>> Libre-97-2000_myhovercraftisfullofeels_.doc:$oldoffice$1*cb5ed06ae27c03989b680ff3075b3558*8ae7ab4c9d5e8ea6c6391939fe8eee33*a0ffa5b7acc2d3062ca4a3e24c05827b
>>
>> ...so we miss 8 out of 30. I have no idea which is of what type.
> I wonder if these need to be truncated at 15... myhovercraftisf
> I know I was able to input over 15 chars to save them, but I know
> opening the old formats they do not allow more than 15 chars input
> (good QA M$). They do open using 15 chars when I tested using the
> office suites, not sure about the JtR side...
$ ../run/john test2.in -loop -ru:truncate
Loaded 30 password hashes with 30 different salts (Office <= 2003 RC4
MD5 [32/64])
Remaining 8 password hashes with 8 different salts
Loop-back mode: Reading candidates from pot file $JOHN/john.pot
myhovercraftisf (XP-Office97-2000_myhovercraftisfullofeels_.xls)
myhovercraftisf (XP-Office97-2000_myhovercraftisfullofeels_.doc)
myhovercraftisf (2007-Office97-2000_myhovercraftisfullofeels_.dot)
myhovercraftisf (2007-Office97-2000_myhovercraftisfullofeels_.doc)
myhovercraftisf (2003-Office97-2000_myhovercraftisfullofeels_.doc)
myhovercraftisf (Libre-97-2000_myhovercraftisfullofeels_.xlt)
myhovercraftisf (Libre-97-2000_myhovercraftisfullofeels_.xls)
myhovercraftisf (Libre-97-2000_myhovercraftisfullofeels_.doc)
guesses: 8 time: 0:00:00:02 DONE (2012-09-11 00:17) c/s: 323269
trying: myhovercraftisf
Bingo! We crack 30/30. Well done, Dhiru, and thanks, Rich!
magnum
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
