Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sun, 28 Jan 2007 10:41:44 +0300
From: Solar Designer <>
Subject: Re: how to find a password of 16 digits

On Fri, Jan 26, 2007 at 09:41:27PM +0100, Frank Dittrich wrote:
> $[0-9]$[0-9]$[0-9]$[0-9]$[0-9]$[0-9]$[0-9]$[0-9]$[0-9]$[0-9]
> could work as a set of *MANY* rules to append 10 digits
> to a wordlist of passwords consisting of 6 digits
> (which you could create using incremental mode with
> MinLen = 6 and MaxLen = 6).

Good idea, but:

> But I doubt that John The Ripper was designed to process that many rules.

No, it was not.  It will spend ages verifying the syntax of those rules
before it starts to do anything.  Maybe I need to enhance it to skip the
syntax check when the number of rules is too large (say, more than a

Alexander Peslyak <solar at>
GPG key ID: 5B341F15  fp: B3FB 63F4 D7A3 BCCC 6F6E  FC55 A2FC 027C 5B34 1F15 - bringing security into open computing environments

To unsubscribe, e-mail and reply
to the automated confirmation request that will be sent to you.

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.