Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Mon, 15 May 2006 20:57:52 +0100
From: "jonathan rennie" <jonathan_rennie@...mail.com>
To: <john-users@...ts.openwall.com>
Subject: RE: unrecognized encryption

Fantastic.......

I owe you a beer
!!

;-) 

-----Original Message-----
From: Solar Designer [mailto:solar@...nwall.com] 
Sent: 15 May 2006 19:19
To: john-users@...ts.openwall.com
Subject: Re: [john-users] unrecognized encryption

On Mon, May 15, 2006 at 10:48:04AM -0500, Jonathan Rennie wrote:
> create account admin "mickey" encrypted "595E87$tke8rNTAva8Sbwm35ctpI/"
[...]
> create account admin "goofy" encrypted "P13W97$tBW5aFepUmi2k49T2zkK50"
> 
> all of these accounts were created using a password that was the same 
> as the account name.....

Well, they do use the FreeBSD-derived algorithm unmodified.  Here's a sed
one-liner to get your passwords into a format usable by John:

sed -n 's/:/_/g; s/^create account [^"]*"\(.\{1,\}\)" encrypted
"\([$./0-9A-Za-z]\{27,31\}\)".*$/\1:$1$\2/p' < extreme-switch-config >
passwd

The output from sed is:

mickey:$1$595E87$tke8rNTAva8Sbwm35ctpI/
minnie:$1$nB3T87$w52t8g9q5Wm3sWWxojJDx.
donald:$1$E74e87$SUB8BXN.Mrc6uFzUXzkMx1
daisie:$1$xp.s87$YV0hUcQ8JBjbFV.ZEg22b.
daffy:$1$CE.897$SW4BA9o87hTYSPnlm8mjM/
goofy:$1$P13W97$tBW5aFepUmi2k49T2zkK50

and John cracks it like this:

Loaded 6 password hashes with 6 different salts (FreeBSD MD5 [32/32])
daisie           (daisie)
daffy            (daffy)
goofy            (goofy)
donald           (donald)
mickey           (mickey)
minnie           (minnie)
guesses: 6  time: 0:00:00:00 100% (1)  c/s: 42.85  trying: minnie

--
Alexander Peslyak <solar at openwall.com> GPG key ID: B35D3598  fp: 6429
0D7E F130 C13E C929  6447 73C3 A290 B35D 3598 http://www.openwall.com -
bringing security into open computing environments

Was I helpful?  Please give your feedback here: http://rate.affero.net/solar

--
To unsubscribe, e-mail john-users-unsubscribe@...ts.openwall.com and reply
to the automated confirmation request that will be sent to you.



-- 
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.1.392 / Virus Database: 268.5.6/340 - Release Date: 15/05/2006
 

-- 
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.1.392 / Virus Database: 268.5.6/340 - Release Date: 15/05/2006
 

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.