Date: Tue, 14 Feb 2012 17:05:18 -0500 From: Matt Weir <cweir@...edu> To: john-dev@...ts.openwall.com Subject: Re: stacking rules and external filters on top of other modes (was: --external=Keyboard mode [was: john-users]) I'm probably misunderstanding the capability the original question was asking for, but it sounds like they were asking for parallel processing of rules instead of batch/sequential processing, aka: >>"--rules=a --rules=b" invoke the two rulesets in parallel (so >>e.g. if the rulesets have 3 rules each, that will be an equivalent of 9 >>rules total) Hashcat currently supports that by using a stdin option and then applying all the rules to each input word before moving to the next input word, (there may be other ways they support parallel rules, but that's the way I'm familiar with). The basic issue, chaining rules in parallel, is a problem I've run into in the past when using John. The way I dealt with it was by writing my own scripts that did pretty much the same thing. That's not an ideal method to deal with the problem though since I'll be the first to admit my scripts were fairly slow. Here is an example where I applied word mangling rules to the output created by JtR's incremental mode: https://sites.google.com/site/reusablesec/Home/password-cracking-tools/middle-child One way JtR could deal with the problem is much the same way Hashcat does. If both the -stdin and the -rules options are selected, then John should create all of the "mangling rule + input word" guesses for the first input word before moving on to the next input word. Another option would be to cache N words from stdin, run the rules on them to create guesses, (essentially using them as a small input dictionary), while grabbing the next N words from stdin. This might also help the initiatives to get JtR to work with GPU's as you'd only have to transfer each dictionary word once to the GPU as you'd be applying all of the mangling rules there and then discarding it, vs creating the guess on the CPU and just transferring it to the GPU to be hashed. I admit I haven't been keeping up with the JtR GPU development though so I might be repeating old info or you guys came up with a better solution already ;) Matt Weir
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.