Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Fri, 04 May 2012 01:00:20 +0200
From: magnum <>
Subject: Re: Cracking Thunderbirds password database. [was: john-users]

On 04/04/2012 06:59 AM, Dhiru Kholia wrote:
> JtR is now able to crack "master" passwords (it requires only key3.db
> file to do so).
> 1. Use latest code from
> Install NSS library, un-comment HAVE_NSS line in src/Makefile and
> build JtR.
> 2. Run mozilla2john on Thunderbird's key3.db file.
> (../run/mozilla2john ~/.thunderbird/$profile$.default/key3.db)
> 3. Run john on output of mozilla2john.


I think the above instructions (maybe also with specific references of
eg. RPM and deb package names (the latter is "libnss3" and I think
"pkg-config" is needed too)) shold be added to some file in doc/

I recall some earlier format of yours also needed "special" libraries,
this too should be documented somewhere if it's not already.

And finally, the pkg-config stuff in CFLAGS et al still outputs a wad of
warnings when building without having nss. Maybe you forgot to fix it
because you don't see them :)  ...and worse, what happens if a user do
not even have pkg-config? This must be fixed before next Jumbo.


Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.