john-users - Re: Segmentation fault in john-1.7.9-jumbo-5 under some conditions

Openwall GNU/*/Linux 3.0 - a small security-enhanced Linux distro for servers

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Sun, 22 Jan 2012 15:32:32 +0100
From: madfran@...-ezine.org
To: john-users@...ts.openwall.com
Subject: Re: Segmentation fault in john-1.7.9-jumbo-5 under
 some conditions

>> Then I try the original john.conf
> ...
>> Segmentation fault (core dumped)
>
> Are you saying that the problem is reproducible even on the official
> Windows build of john-1.7.9-jumbo-5 with the original Keyboard mode?

Yes

> madfran - what if you try LM instead of NTLM?  (Indeed, you will need to
have a file with some LM hashes for that.)

Same problem

> What if you do that with a non-jumbo build?

No problem

\john\john179\run>john --ext=Keyboard -session=win01 hash-10-2011a.txt
Loaded 2 password hashes with no different salts (LM DES [128/128 BS SSE2])
guesses: 0  time: 0:00:00:05  c/s: 8765K  trying: MHUJHU8 - MHUJHBH
guesses: 0  time: 0:00:00:12  c/s: 8426K  trying: 0[;P[;[ - 0[;P989
Session aborted

\john\john179\run>john --restore=win01
Loaded 2 password hashes with no different salts (LM DES [128/128 BS SSE2])
guesses: 0  time: 0:00:00:17  c/s: 8240K  trying: R5T6YGH - R5T6YGT
guesses: 0  time: 0:00:00:20  c/s: 8262K  trying: YHBGNBG - YHBGNM,
guesses: 0  time: 0:00:00:25  c/s: 8263K  trying: ['P[;OI - ['P[;O9
Session aborted

By the way
I don’t know if the hash it self has some special thing but,… here you are.
He comes from a Windows 7 extracted with a livecd (BackTrack.

04cfc73de908d1db296b05074ccad53d