Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Fri, 2 Nov 2012 11:27:47 +0100
From: magnum <john.magnum@...hmail.com>
To: john-dev@...ts.openwall.com
Subject: Re: KoreLogic rules on Openwall

On 2 Nov, 2012, at 0:00 , Vlatko Kosturjak <kost@...ux.hr> wrote:

> I was playing with KoreLogic rules found here:
> http://openwall.info/wiki/_media/john/korelogic-rules-20100801-reworked-all-3.txt
> 
> And I think I found bug, and the fix/diff is available here:
> https://github.com/kost/jtr-stuff/commit/5a1a9fd49367d154e9caab1660d3054cbeaa27da#rules/korelogic-rules-20100801-reworked-all-3.txt

@@ -233,7 +233,7 @@ A0"[Ss][uU][nN][dD][aA4@...Y]"
  [:c] <* Az"\p[fF]ebruary"
  [:c] Az"\p[fF]ebruary[0-9]" <+
  [:c] Az"\p[fF]ebruary[0-9][0-9]" <+
- [:c] Az"\p[mM]arch"
+ [:c] <* Az"\p[mM]arch"
  [:c] Az"\p[mM]arch[0-9]" <+
  [:c] Az"\p[mM]arch[0-9][0-9]" <+
  [:c] <* Az"\p[aA]pril"

This may have been intended given that (I think) no formats have a shorter maximum length than 7. But it doesn't harm much, especially if you use the --stdout=N or --length=N option to manually decrease that.


> I have also made localized/Croatian version of the rules (only parts
> which are relevant):
> https://github.com/kost/jtr-stuff/blob/master/rules/rules-kosthrv.txt

Cool. On that subject, would you like me to add some codepage support? It's extremely easy to do so with the toolchain we made when adding the codepage support. What would be right for Croatian? CP852 and ISO-8859-2 perhaps?

magnum

Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ