john-users - Re: sha1(md5($pass)

Openwall wordlists collection for password cracking (20+ languages)
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Fri, 15 Jul 2011 23:31:41 +0000 (UTC)
From: Donovan <contact.newangels@...il.com>
To: john-users@...ts.openwall.com
Subject: Re: sha1(md5($pass)

Solar Designer <solar@...> writes:

> 
> 
> These are supported in recent -jumbo, but you need to specify the
> --format='md5_gen(23)' option, and not all builds will recognize it.
> Specifically, -x86-64 builds of 1.7.8-jumbo-2 don't, whereas 32-bit x86
> and "make generic" builds do.
> 
> Since you say you're using an existing Universal Binary build for a Mac,
> you may have to explicitly invoke its 32-bit component using:
> 
> arch -i386 ./john --format='md5_gen(23)' pw
> 
> but I don't know/recall if that older version supports md5_gen(23) at
> all or not, in any of its builds.  Maybe not, in which case you'd need
> to build and use a newer version instead.
> 
> 
> That's not what you need.  This syntax is for certain trivial kinds of
> salted SHA-1 hashes, with no MD5 involved.
> 
> 
> Here's how these are loaded by a "make generic" build of 1.7.8-jumbo-2
> on a Linux/x86-64 system (no 32-bit gcc/glibc/openssl, which is why I
> had to use "generic" in this case):
> 
> $ ./john --format='md5_gen(23)' pw
> Loaded 5 password hashes with no different salts ( md5_gen(23): sha1(md5($p))
[64x2 (MD5_Body)])
> 
> To test that this works right, I generated the following hash:
> 
> 4028a0e356acc947fcd2bfbf00cef11e128d484a
> 
> The corresponding password gets cracked:
> 
> $ ./john --format='md5_gen(23)' pw-test 
> Loaded 1 password hash ( md5_gen(23): sha1(md5($p)) [64x2 (MD5_Body)])
> test             (?)
> guesses: 1  time: 0:00:00:04 DONE (Sat Jul 16 02:40:28 2011)  c/s: 29.29 
trying: 12345 - barney
> Use the "--show" option to display all of the cracked passwords reliably
> 
> There's some slowness at startup, though - but with your 5 hashes the
> speed increased to a reasonable level (millions c/s) after a while.
> 
> Alexander
> 
> 

Hello Alexander,

Thank you so much to take the time to help me & share your precious advices,
really appreciated..

Ok, i understand all perfectly....i am going to try & come back to repport.

Well, concern the Erik version, i think this one ( Jumbo 12 ) seem supported the
md5_gen...i allready use for VB hashes., & if not i have to build an new one for
Mac.

Thanks again !

Best Regards,

Donovan