Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sun, 4 Nov 2012 15:10:26 -0700
From: Stephen John Smoogen <smooge@...il.com>
To: john-users@...ts.openwall.com
Subject: Re: Need help with hashes from isocode plaintext

On 4 November 2012 07:55, wfdawson <wfdawson@...lsouth.net> wrote:
> I'm having some difficulty grasping how to make JtR work for hashes from unicode plaintext.  I'm sure I'm missing something very basic.

md5 does not do unicode. So the special a in there is going to be the
ansi interpretation of unicode.. the ansi characters 0xC3 and 0xA4

what I normally do is take a dictionary and then make sure I set the
--encoding to not be UTF-8 but ansi.. when dealing with md5sum.. then
the md5sum's of someone using unicode actually seem to come out.


> Working from this @PastbinDorks twitter feed: http://t.co/DE3rWS2x.  For example, 005f3942106f3bc5a392dcde686d87f0 -- my attempts do not derive the plain 'geländerxx', presumably the plain for that hash.
>
> I've read http://www.ethicalhacker.net/content/view/341/2/ but it was not helpful.  For one, using base64 to encode and then decode does not result in mangled text as that article demonstrated - on my system, anyway.  Manually converting the 'ä' (LATIN SMALL LETTER A WITH DIAERESIS) to "&#228;" within my wordlist doesn't work, either.
>
> I'm using the Gentoo JtR build (1.7.9-r5); I've also tried using unstable-jumbo cloned from github. My installed locales: en_US.UTF-8 and en_US (ISO-8859-1). My default locale is UTF-8.
>
> wordlist:
>
> geländerxx
> gel&#228;nderxx
>
> hash file (first field articially generated for convenience:
> 45:005f3942106f3bc5a392dcde686d87f0
>
> $ john --session=h --wordlist=w --format=raw-md5 h
> Loaded 1 password hash (Raw MD5 [128/128 SSE2 intrinsics 8x])
> guesses: 0  time: 0:00:00:00 DONE (Sun Nov  4 10:37:25 2012)  c/s: 200  trying: geländerxx - gel&#228;nderxx
>
> Any suggestions?
>
> Thanks.



-- 
Stephen J Smoogen.
"Don't derail a useful feature for the 99% because you're not in it."
Linus Torvalds
"Years ago my mother used to say to me,... Elwood, you must be oh
so smart or oh so pleasant. Well, for years I was smart. I
recommend pleasant. You may quote me."  —James Stewart as Elwood P. Dowd

Powered by blists - more mailing lists

Your e-mail address:

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.