Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 8 May 2012 12:15:01 +0200
From: Frank Dittrich <>
Subject: Re: automation equipped working place of hash cracker,

On 05/08/2012 10:52 AM, Aleksey Cherepanov wrote:
> Alexander suggested to not waste our time on generation .rec files

Yes, I think generating .rec files to distribute cracking tasks to
different clients is not such a good idea.
The file format can change any time, even if you get this done you'll
end up in a maintenance nightmare if you need to support different
versions of .rec file formats.

Another issue IMO is to collect .rec files after interrupting tasks.
These .rec files have been created by john.
And we are collecting them for later reuse _in_the_same_pen_test_.

Once you realize that the cracking rate of a particular task is not as
good as the cracking rate of other tasks, you might want to interrupt
this task, and use the machine for more effective cracking attempts.

During the pen test, the overall cracking rate fill finally decrease, so
that continuing the task that had been interrupted is an interesting
option. (Of course, you wouldn't want to duplicate effort that has
already been spent on this task. That's why, you prefer to reuse the
.rec file.)

If you want to continue this task on a different client, you'll probably
have to transfer it to the central server.

The risk that you have to use different, incompatible john versions
during the same pen test, should be rather small.

If this really is required, you'd need to keep track of which client is
running which john version.


Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.