Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 28 Jul 2015 18:49:13 +0200
From: Marek Wrzosek <marek.wrzosek@...il.com>
To: john-users@...ts.openwall.com
Subject: Re: Why does john display some cracked passwords twice?

W dniu 28.07.2015 o 18:40, Marek Wrzosek pisze:
> Here is some examples:
> br4v0br4v0       (?)
> br4v0br4v0       (?)
> s4lv4t0re!       (?)
> V3ntur4!         (?)
> Br4mwe11.        (?)
> Br4mwe11.        (?)
> Sh4w4n01         (?)
> Sh4w4n01         (?)
> s0cc3r222        (?)
> kn0wl3dg3!       (?)
> s0cc3r222        (?)
> Jav31inas!       (?)
> St0n3h3ng3!      (?)
> H0rn3t01         (?)
> Jav31inas!       (?)
> Pr0activ33       (?)
> H0rn3t01         (?)
> u2we1c0me        (?)
> Fr3ak0ut!        (?)
> Pr0activ33       (?)
> S1ingsh0t!       (?)
> u2we1c0me        (?)
> Beeb1ebr0x!      (?)
> Beeb1ebr0x!      (?)
> b9infidel        (?)
> a6intruder       (?)
> bphoenix92       (?)
> nphilip123       (?)
> nphilip123       (?)
> palphonsus5      (?)
> vferrari70       (?)
> vferrari70       (?)
> 
> This happens very frequently with different modes (incremental,
> wordlist, prince, markov, ...) while cracking raw-md5 with --fork
> option. Sometimes it happens even three times:
> Emmanuelf12      (?)
> Teddyg17         (?)
> Teddyg17         (?)
> Johnnyo18        (?)
> Martinson.17     (?)
> Johnnyo18        (?)
> Martinson.17     (?)
> Johnnyo18        (?)
> Sunsetx99        (?)
> Sunsetx99        (?)
> Sunsetx99        (?)
> Jaguart00        (?)
> Consultas01      (?)
> Atalaya.01       (?)
> Atalaya.01       (?)
> Jaguart00        (?)
> Salaud.01        (?)
> Kantar.02        (?)
> Salaud.01        (?)
> Kantar.02        (?)
> Undertow.06      (?)
> Undertow.06      (?)
> 
> Best Regards
> 
PS. Apparently they are cracked multiple times, because this occurs in a
.pot file too.
$dynamic_0$077a62e15d63c5a10ec58866c2b5202e:passopasso83
$dynamic_0$077a62e15d63c5a10ec58866c2b5202e:passopasso83
$dynamic_0$5bc2b11083521d003024d2cc9509b9b4:Olenka.75
$dynamic_0$5bc2b11083521d003024d2cc9509b9b4:Olenka.75
$dynamic_0$e265cc8518c33174991034793da97aaa:Chukker.23
$dynamic_0$da9cc3802494eb4ff0fa04804fb44903:Poggio.88
$dynamic_0$1b470ceb5cb817125d6a567400c8ed52:Willie!!!22
$dynamic_0$db636e3bfad1f639279072f9a82a9381:Greenman!22
$dynamic_0$14ad9cce0331dbea7243b56bbaebe505:Christopm23
$dynamic_0$095f2c0d658b92aa571cfe73f08ea8b8:Melville.27
$dynamic_0$6a9243068a7981a0be4f8b8d76b8e2ac:Silvie.82
$dynamic_0$1b470ceb5cb817125d6a567400c8ed52:Willie!!!22
$dynamic_0$db636e3bfad1f639279072f9a82a9381:Greenman!22
$dynamic_0$e265cc8518c33174991034793da97aaa:Chukker.23
$dynamic_0$14ad9cce0331dbea7243b56bbaebe505:Christopm23
$dynamic_0$f23210ce21d68742c69d20c3585b6ebf:Sebec!23
$dynamic_0$e2898665c2ec65e8b29d4a410e412630:Remember!!25

Maybe this would be helpful too:
$ ./john --list=build-info
Version: 1.8.0.6-jumbo-1-521-gb58aa25
Build: linux-gnu 64-bit AVX-ac OMP
SIMD: AVX, interleaving: MD4:3 MD5:3 SHA1:1 SHA256:1 SHA512:1
$JOHN is ./
Format interface version: 13
Max. number of reported tunable costs: 3
Rec file version: REC4
Charset file version: CHR3
CHARSET_MIN: 1 (0x01)
CHARSET_MAX: 255 (0xff)
CHARSET_LENGTH: 24
Max. Markov mode level: 400
Max. Markov mode password length: 30
gcc version: 4.7.3
GNU libc version: 2.15 (loaded: 2.15)
Crypto library: OpenSSL
OpenSSL library version: 01000100f
OpenSSL 1.0.1 14 Mar 2012
GMP library version: 5.0.2
Regex library version: 1.2	(loaded: 1.2.5)
File locking: fcntl()
fseek(): fseek
ftell(): ftell
fopen(): fopen
memmem(): System's

-- 
Marek Wrzosek
marek.wrzosek@...il.com

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.