Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sat, 31 Dec 2011 22:59:58 +0400
From: Solar Designer <solar@...nwall.com>
To: john-users@...ts.openwall.com
Subject: Re: more info about syntax

On Sat, Dec 31, 2011 at 09:25:20AM +0100, websiteaccess@...il.com wrote:
>  Well, I checked in the _fmt*.c in the src folder.
> 
>  For example for a very basic hash format, I can read :
> 
> ----------------------------------------------------------------------------------------
> static struct fmt_tests tests[] = {
> 	{"5a105e8b9d40e1329780d62ea2265d8a","test1"},
> 	{FORMAT_TAG "378e2c4a07968da2eca692320136433d","thatsworking"},
> 	{FORMAT_TAG "8ad8757baa8564dc136c1e07507f4a98","test3"},
> 	{"d41d8cd98f00b204e9800998ecf8427e", ""},
> 	{NULL}
> ----------------------------------------------------------------------------------------
> 
> 
>  The right syntax in the JTR's terminal is 
>  "format=raw-md5 "
>  and the hashlist must be build as
>  "username:MD5_hash"
> 
>  These infos are absolutely NOT shown in the _fmt*.c

The format name is shown in FORMAT_LABEL.  The line formatting of
"username:MD5_hash" is optional - you can as well put MD5_hash on a line
on its own.  Additionally, if you do the latter and you don't pass the
--format option, John will advise you of possible --format=... options
to use (given the line's syntax).

I understand and agree that these are not valid excuses for not having
better documentation, though.

>  We request since severals months (years ?) a complete documentation
>  formatted as following

Why don't "you" (the user community, which I think is what you meant by
"we") contribute such documentation?  Very few people contributed very
little stuff to the sample-hashes and sample-non-hashes page on the wiki.
You could have contributed more!

>  At http://pentestmonkey.net/cheat-sheet/john-the-ripper-hash-formats
>  We have a very good example, but seems incomplete (was with john-1.7.8-jumbo-5).

Yes, it's incomplete and slightly unreasonable.

>  In the next release, can you add a PDF/HTML file with all formats/commands inspired from http://pentestmonkey.net/ ?

I hope someone in the community will do that or something like it for
-jumbo.  Completing/updating the wiki pages would be a good start.

I am not personally planning to work on that for the very next release.

Alexander

Powered by blists - more mailing lists

Your e-mail address:

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.