john-users - Re: Making an incremental charset

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / news community lists wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [<thread-prev] [month] [year] [list]

Date: Tue, 10 Feb 2009 19:06:46 -0500
From: Ryan Echternacht <ryan.echternacht@...il.com>
To: john-users@...ts.openwall.com
Subject: Re: Making an incremental charset

Thank you for your help.  The policy came from a password set for a  
Network Security course.  My professor assured us the policy was  
enforced.  I had broken most of the passwords using wordlist mangling,  
but I was unable to break the last few, and wanted to try an  
incremental break.

Thanks again, I will look into your suggestions.
--ryan

On Feb 10, 2009, at 12:35 AM, Solar Designer wrote:
> ... Also, just where did this requirement come from?
> Is it a password policy that you think was being enforced?  If so,
> experience tells me that the policy is unlikely to have been enforced at
> all times and for all ways a password could have been set/changed.  It'd
> be wise for you to not encode that policy into JtR as well, but rather
> to let JtR test other candidate passwords (the non-compliant ones) -
> chances are that it'll find some.

-- 
To unsubscribe, e-mail john-users-unsubscribe@...ts.openwall.com and reply
to the automated confirmation request that will be sent to you.