john-users - Re: Password generating tool

Openwall GNU/*/Linux 3.0 - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Wed, 13 Aug 2008 16:56:43 +0200
From: Markus Friedel <markus.friedel@....net>
To: john-users@...ts.openwall.com
Subject: Re: Password generating tool

This scripts work great. But now after using and testing i search for 
other hash types. i try some other hash types from the 
Authen::Passphrase but it seems that john cannot handle these ones. i am 
using john with the markov extensions.
some other suggestions for getting hashes with scripts like the perl one?

Solar Designer schrieb:
> On Wed, Jun 18, 2008 at 03:27:00PM +0200, Markus Friedel wrote:
>> on my way to get John working with BOINC i have to do some tests.
>> So i need some passwords. actually i get them by using pwgen an mkpasswd 
>> this way:
>>
>> pwgen -A -0 $PWLENGTH 1 | mkpasswd -H MD5 -s >> mypassword
>>
>> The problem with mkpasswd is, i can only generate md5 and des. But i 
>> want to have more algorithms to test on.
>>
>> Can somebody show me a tool who does this with more algorithms and still 
>> works with john? I have tested mcrypt, but didnt get it work with john.
> 
> I've attached a couple of Perl scripts that do what you have asked for -
> and more.  The scripts require the Authen::Passphrase module from CPAN,
> and they accept a wordlist (such as JtR's default password.lst) on
> standard input and produce /etc/passwd-like or PWDUMP-like entries on
> standard output.  This covers all of the hash types supported by JtR
> natively, and NTLM.  The plaintext passwords are placed into the GECOS
> field, which lets the "single crack" mode crack them instantly.
> 
> Alexander
> 

-- 
To unsubscribe, e-mail john-users-unsubscribe@...ts.openwall.com and reply
to the automated confirmation request that will be sent to you.