[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Fri, 19 Feb 2010 11:27:35 -0600
From: Minga Minga <mingakore@...il.com>
To: john-users@...ts.openwall.com
Subject: New updated lanman.chr based on RockYou Data
All,
I decided to go ahead and make a replacement for lanman.chr based on the
rockyou dataset.
This can be used as:
1) A replacement for lanman.chr
2) An additional chr file to be used separately from the default lanman.chr
To give you an idea how it was created, I performed the following commands:
1) Taking the rockyou list - and converting to upper case.
2) cut -b 1-7 rockyou.dic >> lanmanrockyou.dic
3) cut -b 8-14 rockyou.dic >> lanmanrockyou.dic
4) cut -b 15-21 rockyou.dic >> lanmanrockyou.dic
5) generated LANMAN hashes for all entries in lanmanrockyou.dic
6) cracked all the LANMAN hashes
7) generated a .chr file from the cracked hashes.
Previously, the output of lanman.chr was:
./john -i:lanman -stdout | head -n 10
1952
SAMER
STARK
START
STACK
STACE
STEVE
STEVY
STEEN
STEET
Now, the output starts as:
./john -i:rockyoulanman -stdout | head -n 10
1
E
A
3
2
S
7
4
5
8
You will notice that the rockyou-lanman.chr starts with short passwords
first. This was not by design, but actually makes a good bit of sense in that
there are more 9,10,11,12 character passwords these days. Since LANMAN
splits those passwords up, it is more likely to have 1,2,3,4 character LANMAN
passwords. Agree? Disagree?
Previous the password '123456' was approximately the 20,500,000 password tried.
Now, the password '123456' is roughly the 10,700'th password tried.
(Non-scientific data - more of an FYI)
The new rockyou-lanman.chr file can be downloaded here:
http://korelogic.com/tools.html
---------------------------------------------------------------------
-Minga / Rick Redman
KoreLogic
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
