john-users - RE: syntax for SHA1 salted

Openwall wordlists collection for password cracking (20+ languages)

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Sun, 24 Jan 2010 17:44:41 -0600
From: "Jim" <jfoug@....net>
To: <john-users@...ts.openwall.com>
Subject: RE: syntax for SHA1 salted

At some time in the near future, I might give a go at SHA1 the same as 
I have done for MD5 (i.e. make a generic modifiable module for it).  I 
Would also like to allow MD5/SHA1 (or others like DES/SHA2, etc) to 
interoperate with each other.  Thus if there is a board that does 
something like

SHA1(salt.MD5(pass(MD5(salt))) 

>On Sat, Jan 23, 2010 at 05:49:55PM +0100, websiteaccess@...il.com wrote:
>>  I use JTR 1.7.4.2 with jumbo patch.
>> 
>>  Is JTR able to crack SHA1 salted with username as salt ( 
>> sha1($username.$pass) [PHP]  )
>
>There's no built-in support for that currently, 
>...
>Of course, it'd be better to create a custom "format" (maybe a somewhat
>generic one similar to JimF's "generic MD5" stuff).
>
>Alexander