Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Mon, 13 Jun 2005 18:59:44 +0400
From: Solar Designer <solar@...nwall.com>
To: john-users@...ts.openwall.com
Subject: Re: Question regarding files on CD

Hello Jim,

[ For those on john-users who do not have the CD, the files being
discussed are:

-r--r--r--    1 root     root     47308207 Oct  9  2003 all.lst
-r--r--r--    1 root     root     497742834 Oct  9  2003 mangled.lst ]

On Mon, Jun 13, 2005 at 09:15:40AM -0400, Jim Brown wrote:
> I purchased the CD and noted the two files 'all.lst' and
> 'mangled.lst'.  Can you tell me if one is a subset of
> the other?

Yes: everything found in all.lst is also included in mangled.lst,
although not all words from all.lst are in fact mangled (some are
merely included as they are).

> Is 'mangled.lst' usable as is?  

As explained above, yes, it is.  But please see below for more detail.

You may want to browse these files with any text file viewer (such as
with "less -n FILENAME" on a Unix-like system), -- the files start
with comments explaining the content.  For example, for mangled.lst,
the comment lines are as follows:

#!comment: This list has been compiled by Solar Designer of Openwall Project,
#!comment: http://www.openwall.com/wordlists/
#!comment:
#!comment: Input wordlist files passed through word mangling rules, in order:
#!comment: passwords/password.lst
#!comment: passwords/lower.lst
#!comment: languages/English/1-tiny/lower.lst
#!comment: languages/English/1-tiny/cap.lst
#!comment: languages/English/2-small/lower.lst
#!comment: languages/English/2-small/cap.lst
#!comment: languages/English/2-small/alnum.lst
#!comment: languages/English/2-small/mixed.lst
#!comment: languages/German/1-small/lower.lst
#!comment: languages/German/1-small/cap.lst
#!comment: languages/French/lower.lst
#!comment: languages/Danish/1-small/lower.lst
#!comment: languages/Dutch/1-clean/lower.lst
#!comment: languages/Italian/1-small/lower.lst
#!comment: languages/English/3-large/lower.lst
#!comment: languages/English/3-large/cap.lst
#!comment: languages/English/3-large/alnum.lst
#!comment: languages/English/3-large/acronym.lst
#!comment:
#!comment: Additionally, all unique words from all.lst are included after the
#!comment: mangled tiny English wordlists.

This last comment would have answered your question.

Basically, it's the smaller lists for the more common languages which
have the mangling rules pre-applied, while less common words are
merely included as they are.  If you want to apply the mangling rules
to _everything_ found in all.lst, you can either run JtR's wordlist
rules against all.lst (instead of mangled.lst), or you can run them
against mangled.lst (double-mangling the more common words - which may
in fact be desired).

Unfortunately, all.lst with all entries pre-mangled would exceed the
size of a CD by far.

Hope this helps.

-- 
Alexander Peslyak <solar at openwall.com>
GPG key ID: B35D3598  fp: 6429 0D7E F130 C13E C929  6447 73C3 A290 B35D 3598
http://www.openwall.com - bringing security into open computing environments

Was I helpful?  Please give your feedback here: http://rate.affero.net/solar

Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ