john-users - RE: Salted SHA1 Hash

Openwall GNU/*/Linux 3.0 - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Wed, 5 Sep 2012 10:54:56 -0500
From: "jfoug" <jfoug@....net>
To: <john-users@...ts.openwall.com>,
	"'NeonFlash'" <psykosonik_frequenz@...oo.com>
Subject: RE: Salted SHA1 Hash

You asked the same question not far back, and were provided with a tool to
handle this.

Simply put, JtR 'proper' splits up the lines, due to the ':' chars.  There
are several ways to attack this.  You can use the --field-separator-char=c
flag for JtR (I would not recommend this because of other side effect).  You
can use dyna 24, but convert the salt to $HEX$. This is the route I would
take, personally.

This message provided a tool to convert to easily convert dyna to $HEX$
format:

http://www.openwall.com/lists/john-users/2012/06/04/10

I am going to get that tool tied into normal JtR build/tool chain.

Jim.

>From: NeonFlash [mailto:psykosonik_frequenz@...oo.com]
>
>How do you load a Salted SHA1 hash in JtR?
>
>Both dynamic_24 and sha1-gen are not working for me.
>
>The format of the hash is: sha1($pass, $salt)
>
>Here is how the hash and salt look like:
>
>HASH = D2AB614E4E9A8D4B434FB4666E885C583EADD82E69D2D7644A578AE704213E2A
>SALT = :20120901:23
>
>Formatted it as:
>
>$SHA1s$:20120901:23$D2AB614E4E9A8D4B434FB4666E885C583EADD82E69D2D7644A57
>8AE704213E2A
>
>./john -fo=sha1-gen -w:wordlist.txt sha1.txt
>
>No hashes are loaded!
>
>Now, Formatted it as:
>
>$dynamic_24$D2AB614E4E9A8D4B434FB4666E885C583EADD82E69D2D7644A578AE70421
>3E2A$:20120901:23
>
>./john --subformat=dynamic_24 -w:wordlist.txt sha1.txt
>
>No hashes are loaded!
>
>I have tried converting the hash into lowercase as well just in case
>that was causing an issue in loading them.
>
>Help would be appreciated.