Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Fri, 12 May 2006 23:08:56 +0400
From: Solar Designer <solar@...nwall.com>
To: john-users@...ts.openwall.com
Subject: Re: John seems to exit without error

On Fri, May 12, 2006 at 01:38:33PM -0400, Arvind Sood wrote:
> - Notice that john immediately returns me to a $ prompt. Also - why did it
> load 11 hashes? There are many more accounts .....
> 
> [sooda@...alhost run]$ ./john --wordlist=../pwdfiles/lm_cracked.txt --rules
> --format=nt --session=ntcrack ../pwdfiles/pwoutput.txt
> Loaded 11 password hashes with no different salts (NT MD4 [TridgeMD4])
> guesses: 0  time: 0:00:00:00 100%  c/s: 34100  trying: Passwording
> [sooda@...alhost run]$

> Why does John only load 11 hashes?

John does not waste time cracking the hashes which are already in
john.pot.  In the log file, you should see two separate lines like:

0:00:00:00 Loaded a total of <many> password hashes with no different salts
0:00:00:00 Remaining 11 password hashes with no different salts

If you want to have it crack those hashes again - since you're just
testing - you need to move the existing john.pot out of the way.

> Why does it immediately return me to a $ prompt?

That's because there's not much work for it to do - you give it the
passwords and it only needs to check for upper vs. lower case.  In your
example, it only had to compute NTLM hashes 34,100 times - this can be
done in under a second. :-)

> - it did not do that with the --format=LM switch.

Indeed.  You actually had it crack passwords for you in that run.

> Why does john not show up in the ps -ef?

That's because it really completes its work and terminates in under a
second.  It does not "background" itself or something.

-- 
Alexander Peslyak <solar at openwall.com>
GPG key ID: B35D3598  fp: 6429 0D7E F130 C13E C929  6447 73C3 A290 B35D 3598
http://www.openwall.com - bringing security into open computing environments

Was I helpful?  Please give your feedback here: http://rate.affero.net/solar

Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ