john-users - Can't get simple john.conf rules right

Openwall wordlists collection for password cracking (20+ languages)
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Wed, 10 Oct 2012 08:06:11 -0700 (PDT)
From: Blaine Nagorski <addude66@...oo.com>
To: "john-users@...ts.openwall.com" <john-users@...ts.openwall.com>
Subject: Can't get simple john.conf rules right

Hello, group...

First the basics: I've read the FAQ and I've spent hours fiddling with john.conf and adding rules under [List.Rules:Wordlist] to accomplish something that I'm very embarrassed to admit I can't make happen.  For whatever reason, a lot of users in my company use the password SlyF0x.  Yes, I know I could just add that exact string to a wordlist but what's bothering the hell out of me is that I can't figure out how to get John to mangle the simple lower-case string slyfox into that.

I am running John as follows:  ./john -wordlist=words.txt -rules passwordfile      And words.txt contains the word slyfox in all lowercase.


If I add this to [List.Rules:Wordlist]...

so0Q
sa4Q
so0QMsa4Q


That takes care of substituting zeros for the letter o (among other things) but when I add this for case toggling...

-c T0 Q
-c T1 Q T[z0]
-c T2 Q T[z0] T[z1]
-c T3 Q T[z0] T[z1] T[z2]
-c T4 Q T[z0] T[z1] T[z2] T[z3]
-c T5 Q T[z0] T[z1] T[z2] T[z3] T[z4]
-c T6 Q T[z0] T[z1] T[z2] T[z3] T[z4] T[z5]
-c T7 Q T[z0] T[z1] T[z2] T[z3] T[z4] T[z5] T[z6]

John appears to toggle case but I've lost the zero substitution.

I sense this will be a remarkably easy answer and I apologize in advance for the question but I am at wit's end with this.

The problem in a nutshell: How to I modify john.conf so that a password of SlyF0x is cracked based on using -rules, on a wordfile that contains only the word slyfox.

Thanks very much in advance.

Blaine