john-users - Re: How to use kerberos 5 patch

Openwall wordlists collection for password cracking (20+ languages)
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Mon, 21 Nov 2005 13:29:38 +0100
From: Frederic Tronel <ftronel@...sa.fr>
To: john-users@...ts.openwall.com
Subject: Re: How to use kerberos 5 patch

Le Lundi 21 Novembre 2005 09:29, Solar Designer a écrit :
> Hi Frederic,

Hi Alexander,

>
> On Sun, Nov 20, 2005 at 11:35:49AM +0100, Frederic Tronel wrote:
> > Benchmarking: Kerberos v5 TGT [krb5 3DES (des3-cbc-sha1)]... DONE
> > Raw:    14145 c/s real, 16217 c/s virtual
>
> Great.
>
> > I have taken an example ticket from the patch source code:
> >
> > $ cat ticket
> > $krb5$oskov$ACM.UIUC.EDU$4730d7249765615d6f3652321c4fb
> > 76d09fb9cd06faeb0c31b8737f9fdfcde4bd4259c31cb1dff25df39173
> > ......
> > 2c2265a4ffc72e9fb811da17c7f2887ccb17e2f87cd1f6c28a9afc0c08
> > 3a9356a9ee2a28d2e4a01fc7ea90cc8836b8e25650c3a1409b811d0
> > bad42a59aa418143291d42d7b1e6cb5b1876a4cc758d721323a762
> > e943f774630385c9faa68df6f3a94422f97
>
> There are two problems here:
>
> 1. John expects the file to have a format similar to that of /etc/passwd.
> At least two colon-separated fields are required: a username and a
> password hash.  So you need to introduce "usernames" or any identifiers
> in their place.


Okay I got it ! In fact I should have written my password file like this:
oskov:$krb5$oskov$.....
It works perferctly.

>
> 2. The example TGT encodings given in the patch are almost 500
> characters long each.  When you put them into a file for John to use,
> you need to include exactly one TGT encoding per line.  You must not
> wrap the long encodings.

I wrapped the lines only for my email, otherwise it was a single line in the 
password file.

>
> > $ /usr/local/bin/john ticket
>
> FWIW, when you're installing John system-wide like that, you might want
> to define JOHN_SYSTEMWIDE to 1 in params.h, -- or simply not install
> John system-wide (this is a feature primarily for use by John packages
> in Linux and *BSD distributions).

Ok I will check this for the final installation.

Thank you very much !!

Frederic.