john-users - Re: Joomla and JTR

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Mon, 19 Oct 2009 21:18:30 -0500
From: "JFoug" <jfoug@....net>
To: <john-users@...ts.openwall.com>
Subject: Re: Joomla and JTR

From: "websiteaccess" <websiteaccess@...il.com>
> Is JTR able to crack Joomla hashes ?
>
> I use patched JTR with http://openwall.info/wiki/john/patches
>
> for example :   36302dcd47193e2c6dbc3cfc6f70e11d:KPAvp1xf0bQJppoU  =
> azerty

I receievd this query off list, and replied, but I am not sure if 
websiteaccess@...il.com
is a person, or if a reply works.

In the message I received was the comment:

> I try to use your contribution to JTR (john-1.7.3.1-all-5-md5_gen-2).

so I will assume that the generic md5 is built.  If that is the case, then 
the
proper line for the input file is:

user:md5_gen(1)36302dcd47193e2c6dbc3cfc6f70e11d$KPAvp1xf0bQJppoU

For all md5-gen, you will need the md5_gen(x) signature.  Then, a $ is used
to separate the hash from the salt, since they are needed to be in one unit,
and if a ':' was used, john through it's normal behavior would split that
into some other user gecos field.

Once the file is of that format, john will 'auto' detect and process.

Jim.