Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Fri, 25 Jan 2008 16:16:30 +0300
From: Solar Designer <>
Subject: Re: custom character set

On Thu, Jan 24, 2008 at 02:14:38PM -0500, Adam Turk wrote:
> What I am trying to do is crack my password.

If you have physical access to the system, it is probably more
straightforward to change the password.

> I know what characters are in it so I would like to limit the character list to those characters (tjesTJES) and a length of 10.

What hash type?  (Some truncate or split passwords after a certain
length, some are case-insensitive.)

Does the password really use at least two (or exactly two?) of those
characters more than once (only 8 different characters, but length 10)?

> [Incremental:MODE]
> File = $JOHN/cust.chr
> MinLen = 10
> MaxLen = 10
> CharCount = 8

This won't work unless you adjust params.h and re-compile JtR.  By
default, JtR's "incremental mode" is limited to lengths up to 8 at
compile time.  See:

Another option is for you to define and use an external mode (then
there's no need to re-compile JtR and to generate a custom charset).

> to my john.ini file but I don't know how to limit the character set.  How can I tell john to only use tjesTJES as a character set?

You can create a fake john.pot file with the following contents:


Then generate a charset file as usual (according to the documentation).

Alexander Peslyak <solar at>
GPG key ID: 5B341F15  fp: B3FB 63F4 D7A3 BCCC 6F6E  FC55 A2FC 027C 5B34 1F15 - bringing security into open computing environments

Was I helpful?  Please give your feedback here:

To unsubscribe, e-mail and reply
to the automated confirmation request that will be sent to you.

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.