john-users - Re: How to concat words from wordlists to multi-word-passwords

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / community lists wiki CVSweb mirrors signatures
bringing security into open environments

Order Openwall Wordlists CD (20+ languages) with delivery worldwide or download

[<prev] [next>] [<thread-prev] [month] [year] [list]

Date: Wed, 14 May 2008 04:23:51 +0400
From: Solar Designer <solar@...nwall.com>
To: john-users@...ts.openwall.com
Subject: Re: How to concat words from wordlists to multi-word-passwords

On Mon, Apr 28, 2008 at 09:32:11AM +0200, Uwe Danz wrote:
> I try to break some passwords with a special format. I know that most of the password consist of 3 or 4 parts. Every part is a word from a wordlist. Sometimes with capital letters at the begin. e.g. VeryRedpassword or redHouseWaterCar
> 
> I know that the amount of possible word combinations is very huge. For this reason and the upper and lowercases on word borders the manual concatenation of the word list for instance with perl is NOT my favorite. 

Yet I'm afraid that Perl is the best tool to do it with currently.
The only real problem with it is that when you pipe its output into
"john --stdin", you can't interrupt and restore such a session with
capabilities of JtR.  (For that, you'd need to implement some
"checkpointing" in your Perl script.)

> I tried to use the john "single crack" rules for this purpose
> e.g. 1l2l
> 
> But this option is not allowed for the wordlist mode.
> Also this option supports only concatenation of two words.
> (1l2l3l is not allowed)

You're correct.

Adding a "passphrase" mode to JtR is on my to-do list, but I am unlikely
to attend to this task soon...

Alexander

-- 
To unsubscribe, e-mail john-users-unsubscribe@...ts.openwall.com and reply
to the automated confirmation request that will be sent to you.