[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sat, 13 Aug 2011 01:23:31 -0700 (PDT)
From: firstname lastname <psykosonik_frequenz@...oo.com>
To: john-users@...ts.openwall.com
Subject: Re: md5(md5($p).$s) - VB
You only need to alter the format in which you input the Vbulletin hashes to JTR.
md5_gen(6) and md5_gen(7) are both correct sub formats for Vbulletin hashes.
The only difference between them is, one will do the check on the number of characters in the salt for you, while the other format expects you to do it manually.
":" is a valid salt character in vbulletin hashes.
":" is also by default the field separator in JTR.
you need to manually define the field separator. You can choose it to be a tab character or a space character.
So, to get it working, this is how you need to input the hashes.
user md5_gen(7)33be23d72f2650dd0d049cf1e274fe24$M's
notice that the "colon" between the hash and the salt was replaced by a "$". and there's a space between username and md5_gen(7).
you don't need to specify the format on command line, since JTR will automatically recognize the format of the hash when it parses the hash file using space as the field separator.
./john -w:wordlist.txt --field-separator-char=" " hashes.txt
From what I know, JTR doesn't have support for vbulletin hashes with a 16 character salt. I am not sure if any patch was developed to include this support.
Regards,
NeonFlash
--- On Sat, 8/13/11, Donovan <contact.newangels@...il.com> wrote:
> From: Donovan <contact.newangels@...il.com>
> Subject: [john-users] md5(md5($p).$s) - VB
> To: john-users@...ts.openwall.com
> Date: Saturday, August 13, 2011, 9:28 AM
> Hi All,
>
> I am an bit lost with " md5(md5($p).$s) " a more
> particulary VB_hashes.
>
> I am currently on Mac ( Snow Leopard 10.6.8 )
>
> Build : Jumbo 5 compiled : macosx-x86-64
>
> Hashes probleme : md5(md5($p).$s) VB one's...
>
> Here an ex of hashes :
>
> 9463acc42a06902205a16df64378b0f7:}tiO>-Of6uiW4/}Zu{q?j2wnz?8&wA
> 33ac7e4c174ee309d890e290e3b62884:a6MjDa-V4mO,RoS&d'qV9pt(M-w5aX
> 514171c1ff157c4efb6bf9e5d152e5bd:KY\{UiO8n~Kjgo+K12{JH\N6>}Rq$_
>
> BUT ! can be also ;
>
> 33be23d72f2650dd0d049cf1e274fe24:M's
>
> **************
>
> I take an look on the Doc about MD5-Generic but don't find
> the way to advance.
>
> I take an look on signature's & see ;
>
> md5_gen(6) | md5(md5($p).$s)
> md5_gen(7) | md5(md5($p).$s)|vBulletin. 3 byte salt, salt
> uses ':' char
>
> ***************
>
> I try to take an look first if i can test it :
>
> new-host-3:run xxxx$ ./john --format='md5_gen(6)' --test
> Benchmarking: md5_gen(6): md5(md5($p).$s) [SSE2
> 16x4x2 (intr)]... DONE
> Many salts: 10493K c/s real, 10493K c/s
> virtual
> Only one salt: 4037K c/s real, 4037K c/s
> virtual
>
> new-host-3:run xxx$ ./john --format=md5-gen
> -sub='md5_gen(7)' --test
> Unknown ciphertext format name requested
> new-host-3:run xxxxx$ ./john --format='md5_gen(7)' --test
> Unknown ciphertext format name requested
>
> I try to add md_gen(7) / even (6) on the start in the
> hashes file, like ;
>
> md5(7)514171c1ff157c4efb6bf9e5d152e5bd$KY\{UiO8n~Kjgo+K12{JH\N6>}Rq$_
>
> md5(7):514171c1ff157c4efb6bf9e5d152e5bd$KY\{UiO8n~Kjgo+K12{JH\N6>}Rq$_
>
> I replace the " : " by " $ ", but unfortunately, nothink
> seem worked.
>
> Have you an idea ?
>
> Thanks a lot in advance for your help,
>
> Regards,
>
> Donovan
>
>
>
>
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
