Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Fri, 25 Jan 2008 21:24:25 -0500
From: Adam Turk <>
To: <>
Subject: RE: custom character set

> From:
> If you have physical access to the system, it is probably more
> straightforward to change the password.
> What hash type? (Some truncate or split passwords after a certain
> length, some are case-insensitive.)
> Does the password really use at least two (or exactly two?) of those
> characters more than once (only 8 different characters, but length 10)?
> This won't work unless you adjust params.h and re-compile JtR. By
> default, JtR's "incremental mode" is limited to lengths up to 8 at
> compile time. See:
> Another option is for you to define and use an external mode (then
> there's no need to re-compile JtR and to generate a custom charset).
> You can create a fake john.pot file with the following contents:
The hash is ntlm.  I don't have a LM version of the password as I disabled LM hashes.  I do have physical access to the system as it is my personal pc.  What I did was create a user called test and set its password to TeSjtEsJTE.  I ran pwdump7 to get the hashes.  I am generating a table of time to crack a series of passowords.  I need to see how it would take to crack my password using a custom character.  I have the time it takes to crack using an alphanumeric charset.  
I created a new john.pot using your contents and then tried to generate a new char file using:
john-386.exe --make-charset=cust.chr john.pot
and I get Loaded 0 plaintexts, exiting...
What did I do wrong?

I have looked at using external, but I haven't found any examples of filters.
Helping your favorite cause is as easy as instant messaging. You IM, we give.
To unsubscribe, e-mail and reply
to the automated confirmation request that will be sent to you.

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.