Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Tue, 8 Apr 2008 23:40:08 +0400
From: Solar Designer <>
Subject: --stdout and --restore (was: passwords with fixed position characters and numbers)

On Wed, Apr 02, 2008 at 03:16:59PM +0200, Ronald Brakeboer wrote:
> Since my harddrive is a little too small for the passwordlist

You're not supposed to be saving those generated candidate passwords to
a file (although you can) - instead, you'd pipe them right into whatever
actual password cracker uses them (if it supports reading from stdin,
which it should).

> I wanted to use the option --restore 
> (after deleting everything in the generated pass.file)
> -- restore works but it only outputs to --stdout (on screen) afterwards, not
> longer to file pass.file, even if I manually specify 
> john --restore --stdout=8 > pass.file (which is an illegal option)
> Please try yourself with following option. 
> john --external=<Any-mode> --stdout=8 > some.file 
> Anu thoughts on that?

You must be doing something wrong, and I can only guess what it is.
Most likely you're confused by what parts of the command line are parsed
by JtR and what are parsed by your shell (such as bash or cmd.exe).  The
output redirection character (the ">" in your case) is parsed by the
shell, so the fact that you're redirecting output (and to where) can't
be in any way saved in the .rec file.  On the other hand, the --stdout
option is parsed by JtR, is saved in the .rec file, and must not be
specified again when you restore a session.  If you originally started
the session with:

	john --external=MODE --stdout > some.file

Then you may "restore" it with:

	john --restore > some.file

if you want the file overwritten, or with:

	john --restore >> some.file

if you want further candidate passwords appended to the file.

Similarly, if you pipe the candidate passwords into another program with:

	john --external=MODE --stdout | another-program --its-options

then you'd "restore" it with:

	john --restore | another-program --its-options

However, please note that the latter may actually skip some candidate
passwords because contents of various buffers (in both programs and in
the OS) may be lost when you interrupt the first command.

Alexander Peslyak <solar at>
GPG key ID: 5B341F15  fp: B3FB 63F4 D7A3 BCCC 6F6E  FC55 A2FC 027C 5B34 1F15 - bringing security into open computing environments

Was I helpful?  Please give your feedback here:

To unsubscribe, e-mail and reply
to the automated confirmation request that will be sent to you.

Powered by blists - more mailing lists

Your e-mail address:

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.