Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Sat, 3 Feb 2018 13:58:28 +0100
From: Solar Designer <>
Subject: Re: making wordlist rules

On Fri, Feb 02, 2018 at 07:21:38PM -0800, jeff wrote:
> I got my append and prepend special character rule working.
> I am now having trouble prepending and append 2 numbers.
> My max password length is 8, because I am using des.
> I have tried:
> [List.Rules:a2n]
> # add numbers to the front and end of a password
> '6[^$]"[0-9][0-9]"

This won't work because the ^ and $ commands only expect one character.
For multi-character strings, the command is A:

'6 A[0z]"[0-9][0-9]"

where its first parameter 0 means prepend and z means append (and other
characters would mean insert).

If you insist on using the ^ and $ commands, you may use e.g.:

'6 ^[0-9] ^[0-9]
'6 $[0-9] $[0-9]

or combining them onto one line with some preprocessor magic:

'6 [^$][0-9] \1[0-9]

where \1 means "same as the first preprocessor expansion" - in this
case, repeating the same command, ^ or $.

> How can I prepend and append 2 digits to my dictionary words?

Please see above, and please also see the many examples in the default
john.conf, which includes such rules:

# More suffix stuff...
<- l Az"[190][0-9]"
-c <- (?a c Az"[190][0-9]"
<- l Az"[782][0-9]"
-c <- (?a c Az"[782][0-9]"

# The rest of two-digit suffix stuff, less common numbers...
<- l Az"[63-5][0-9]"
-c <- (?a c Az"[63-5][0-9]"

In fact, if you're cracking descrypt hashes, the speed is probably high
enough that you can simply run --rules=jumbo as-is.


Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ