john-users - RE: JTR not able to crack some hashes utf-8 ?

Openwall wordlists collection for password cracking (20+ languages)
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sun, 13 Dec 2009 20:25:39 +0100
From: websiteaccess <websiteaccess@...il.com>
To: john-users@...ts.openwall.com
Subject: RE: JTR not able to crack some hashes utf-8 ?

Something I don't understand

Try these 3 hashes in JTR 

kosár7:fdb0f376aee452b1e742497fac4790dc
müllerkill:2de7c2e59d413266fcd61d614efe4ba3
österreich:dc5b7bd5d6ae7ffcccb2f2bba1e3079f

with passlist :

kosár7
müllerkill
österreich

This is my log :

iMac-de-xxx-xxx:run xxxxxx$ ./john -format=raw-md5 -w:testdico.txt 
testhash.txt
Loaded 3 password hashes with no different salts (Raw MD5 [raw-md5 SSE2 
16x4])
kosár7          (kosár7)
müllerkill      (müllerkill)
guesses: 2  time: 0:00:00:00 100.00% (ETA: Sun Dec 13 20:23:07 2009)  
c/s: 900  trying: österreich - müllerkill



 Only 2 found !

 Can you explain that ?

 thanks


On Sun, 13 Dec 2009 13:51:49 -0500, Matt Weir wrote:
> Hey,
>   I've used JtR to crack a whole lot of Finnish and Swedish passwords 
> so I know it works. It seems like your test hashing function is the 
> problem. Aka when I hash "müllerkill" to MD5 I get the following:
> 
> a75cf6836c4524621d4c09d35aa10767
> 
> Then when I run JtR it managed to crack the password. I've always had 
> a problem where JtR doesn't print the correct value out to the 
> screen. I think this is a C problem, (or a locale issue), and not a 
> JtR problem since I've dealt with that before on some of my own code. 
> Aka it will print the cracked hash as "m?llerkill" but if I manually 
> check the .pot file it will have the correct value, aka "müllerkill".
> 
> I hope this helps.
> 
> Matt
> 
> -----Original Message-----
> From: websiteaccess [mailto:websiteaccess@...il.com] 
> Sent: Sunday, December 13, 2009 10:40 AM
> To: john-users@...ts.openwall.com
> Subject: [john-users] JTR not able to crack some hashes utf-8 ?
> 
> Hi
> 
>  I use JTR 1.7.3.4 patched with JimF patch for 1.7.3.4-jumbo-2
> 
>  My dico.txt is utf-8 (only 1 word inside  "müllerkill" )
>  My hash.txt is utf-8 (only 1 hash 66259539a45ac8aa62105ea6d91fad41 ), 
> 66259539a45ac8aa62105ea6d91fad41 = müllerkill
> 
>  I did ./john -format=raw-md5 -w:dico.txt hash.txt
> 
>  This is the log :
> 
>  guesses: 0  time: 0:00:00:00 100.00% (ETA: Sun Dec 13 16:16:48 2009)  
> c/s: 100  trying: müllerkill
> 
> 
>  hash not cracked :-/
> 
>  How can you explain that ?
>  
>  Thanks.
> -- 
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
> 
>