john-users - "amy" vs. "any"

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / community lists wiki CVSweb mirrors signatures
bringing security into open environments

This website is powered by Openwall GNU/*/Linux security-enhanced OS

[<prev] [next>] [<thread-prev] [month] [year] [list]

Date: Mon, 19 Dec 2005 01:29:10 +0300
From: Solar Designer <solar@...nwall.com>
To: john-users@...ts.openwall.com
Subject: "amy" vs. "any"

On Sun, Dec 18, 2005 at 10:49:05PM +0100, Frank Dittrich wrote:
> If you didn't change john.conf since 1.6.3?

Actually, I did, but not the wordlist and "single crack" rules.

> (last checked 1.6.39), you might want
> to change the rule(s)
> 
> <9(?a[lc]^y^m^[aA]
> 
> immediately after
> 
> <9(?a[lc]^e^h^[tT]
> 
> into
> 
> <9(?a[lc]^y^n^[aA]
> 
> I think that is what you actually meant.

No, actually "amy" is what was meant.  It appears to be fairly common,
although possibly not common enough to justify having this rule in there.

Did you crack more "any"s than "amy"s?  I'd be surprised.

Thanks,

-- 
Alexander Peslyak <solar at openwall.com>
GPG key ID: B35D3598  fp: 6429 0D7E F130 C13E C929  6447 73C3 A290 B35D 3598
http://www.openwall.com - bringing security into open computing environments