Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Sun, 2 Jun 2013 13:29:29 +0200
From: Frank Dittrich <>
Subject: unable to crack previously cracked oracle hashes (unstable and bleeding)

I just wanted to experiment with the contest hashes and realized that
neither bleeding-jumbo (fetched during contest) nor latest
unstable-jumbo seem to work, even when using hashes that have been
cracked by us during the contest.

$ LC_ALL=C grep -c "^O[$]" john.pot

LC_ALL=C grep "^O[$]" john.pot > oracle.pot

$ ./john --pot=oracle.pot --show /home/fd/contest/hashes-canon/
0 password hashes cracked, 373 left

$ cut -d: -f 2- oracle.pot > oracle.txt
$ head -n 2 oracle.txt

$ ./john ./john --wordlist=oracle.txt
Loaded 373 password hashes with 373 different salts (Oracle 10 DES [32/64])
guesses: 0  time: 0:00:00:01 DONE (Sun Jun  2 13:07:23 2013)  c/s: 76135
 trying: {POTASSIUM'

But when I change




i.e., if I remove the user name ans # after the colon,

I can crack these hashes again, but have to specify --format=oracle to
load the hashes in the correct format.

$ ./john --wordlist=oracle.txt --format=oracle
Loaded 373 password hashes with 373 different salts (Oracle 10 DES [32/64])
&PHOSPHORUS}     (c_elmroth)
{POTASSIUM'      (c_granewald)
guesses: 347  time: 0:00:00:07 DONE (Sun Jun  2 13:17:14 2013)  c/s:
9119  trying: {POTASSIUM'

$ ./john --show --format=oracle |tail -n 3

347 password hashes cracked, 26 left

(Without --format=oracle, the hashes would be treated as mysql hashes,
so the matching oracle hashes wouldn't be found in the pot file.)

So the problem is:
If the user name is already "included" in the hash, john identifies
these hashes as oracle hashes, but is unable to crack them.
John is also unable to correctly match hashes found in the pot file and
hashes to be loaded.


Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.