Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Mon, 24 Jun 2013 10:49:08 +0200
From: magnum <john.magnum@...hmail.com>
To: john-users@...ts.openwall.com
Subject: Re: Fuzzing with regular expressions

On 24 Jun, 2013, at 8:43 , Jan Starke <jan.starke@...ofbed.org> wrote:
> rexgen does now support UTF-8 input, so for example
> rexgen 'M(ü|ö|ue|oe)ller'
> generates all 4 variants of this surname.

Considering users might not know which characters are multibyte or not, would

rexgen 'M[üö]ller'

work? I can accept if it doesn't but it's good to know. If the input line is first converted to UTF16 or UTF32 before parsing, this is probably not even a challenge, it should work just fine.

> In order to integrate rexgen into JtR, what was the necessary requirements
> to the library? I'm currently thinking of
> - state serialization (for "john --restore")
> - ... ?
> 
> Can you give me a good starting point into john's code, to read how those
> features of password generators are invoked by john?

A very short file adding "mask mode" was given here:
http://www.openwall.com/lists/john-dev/2013/06/15/1

It lacks resume and some other stuff but it shows the basics. For complete modes with resume, progress and node/fork support, see mkv.c or inc.c. Or even wordlist.c but that file is a total mess in Jumbo :-)

magnum

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.