Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Sat, 17 Jun 2006 05:53:59 +0400
From: Solar Designer <solar@...nwall.com>
To: john-users@...ts.openwall.com
Subject: Re: Rules, I don't understand

On Thu, Jun 15, 2006 at 06:55:53PM +0200, websiteaccess@...il.com wrote:
>   In fact, I want test every word with birthdate (French date format, 
> day/month)
>  For example : From jim0101 to jim3112
>  and also UK/USA format (month/day)
>  For example : From jim0101 to jim1231
> 
>  I would like find "jim2409"
> 
>  My rule is
> 
>  <5$[0-3]$[0-9]$[0-1]$[0-9]
> 
>  my pass list is of course '"jim"

The above wordlist ruleset line is correct, and it will actually try the
password "jim2409" (and many others) provided that "jim" is in the
wordlist.  It will not try all of the dates in your "UK/USA format",
though (like "jim1231").  And it will try some non-dates.

For those who don't know, the "<5" at the beginning of the above ruleset
line tells John to apply the rest of the rules produced from this line
only to input words that are shorter than 5 characters.  This restriction
may be desirable when both of the following two assertions are true:

1. The password hash type limits the length of passwords (or password
halves, if applicable) to 8 characters.

2. Other ruleset lines exist that try appending fewer than 4 digits to
passwords of 5 to 7 characters long.

In order to implement this optimization yet not hard-code a maximum
password length in the ruleset, the commands "<*", ">*", "<-", and ">-"
may be used.  For example:

# Some [birth] years...
l$1<-$9$[7-96-0]>-
l$2<-$0$0>-
l$1$9<-$[7-9]$[0-9]
l$2$0<-$0$[0-9]
l$1$9<-$[6-0]$[9-0]

-- 
Alexander Peslyak <solar at openwall.com>
GPG key ID: B35D3598  fp: 6429 0D7E F130 C13E C929  6447 73C3 A290 B35D 3598
http://www.openwall.com - bringing security into open computing environments

Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ