john-users - Re: syntax for hash PHPbb3

Openwall GNU/*/Linux 3.0 - a small security-enhanced Linux distro for servers

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Mon, 25 Oct 2010 07:39:20 +0400
From: Solar Designer <solar@...nwall.com>
To: john-users@...ts.openwall.com
Subject: Re: syntax for hash PHPbb3

I just found that the question below was left without a response for a
month. :-(

I'd appreciate it if others in the community help answer questions and
don't let this happen next time. ;-)

On Tue, Sep 28, 2010 at 06:00:05PM +0200, websiteaccess@...il.com wrote:
>  I try to crack a PHPbb3... with JTr (latest version patched)
> 
>  What is the syntax in the hashlist  -> user(tab)md5_gen(17)HASH  ?   
>  In JTR ->   ./john -i:all -field-separator-char="(TAB)"   ?

You could complicate things like that, but you don't have to.  Use the
familiar syntax:

test12345:$H$9IQRaTwmfeRo7ud9Fh4E2PdI0S3r.L0

which gets cracked as:

$ ./john pw
Using phpass mode, by linking to md5_gen(17) functions
Loaded 1 password hash (PHPass MD5 [phpass-MD5 MMX])
test12345        (test12345)
guesses: 1  time: 0:00:00:00 100.00% (1) (ETA: Mon Oct 25 07:33:29 2010)  c/s: 800  trying: test12345 - test12345u

"test12345" is the correct password for that hash.  I also specified it
as the username just to get it "cracked" quickly (as a test).

Alexander