Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Mon, 25 May 2015 09:57:50 +0800
From: Kai Zhao <loverszhao@...il.com>
To: john-dev@...ts.openwall.com
Subject: Fuzzing Report on wordlist, rules, chr

1. Fuzz wordlist
---------------------

I use some of the wordlist from the website as input cases:

http://www.openwall.com/wordlists/

Add __afl_manual_init() before do_wordlist_crack();

if (options.flags & FLG_WORDLIST_CHK) {
    __afl_manual_init();
    do_wordlist_crack(&database, options.wordlist,
                            (options.flags & FLG_RULES) != 0);
}

Command:
afl-fuzz -i input_cases/ -o out ../john test_pw --nolog --wordlist=@@

Speed: about 100~200/sec
Run time: more than two days
Unique crashes: 0

2. Fuzz rules
---------------------

Fuzz config rules: single mode and wordlist mode.

For single mode:

I create several rules based on the original john.conf as input cases. Then,
comment the line below in john.c to speed up fuzzing.

cnt = dynamic_Register_formats(&selfs);
// cnt = dynamic_Register_formats(&selfs);
cnt = 0;

Command:
afl-fuzz -i input_cases/ -o out -f rules.conf ../john test_pw --nolog
--single --config=local.conf

Speed: about 400~600/sec (without asan), 50/sec (with asan).
Run time: more than three days
Unique crashes: 0

3. Fuzz chr
---------------------

Fuzz chr should use the incremental mode which takes more time, so
the speed is very slow. Comment the line below in john.c to speed up
fuzzing.

cnt = dynamic_Register_formats(&selfs);
// cnt = dynamic_Register_formats(&selfs);
cnt = 0;

The incremental part of local.conf:

[Incremental:LanMan]
File = fuzz.chr
MinLen = 0
MaxLen = 7
CharCount = 132

Command:
afl-fuzz -t 1500+ -m none -i input_cases/ -o out -f fuzz.chr ../john ppww
--nolog --skip-self-test --format=md5crypt --incremental=Lanman
--config=local.conf --max-run-time=1

Speed: about 1~10/sec (without asan), 0.9/sec (with asan).
Run time: more than two days
Unique crashes: 0


Thanks,

Kai

Content of type "text/html" skipped

Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ