Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sun, 4 Nov 2012 17:41:32 -0800 (PST)
From: wfdawson <>
To: "" <>
Subject: Re: Need help with hashes from isocode plaintext

Thanks for your comments.  I'm sorry if I'm a bit obtuse on this question - ordinarily, I would not have such difficulties.  Unfortunately, I'm still not able to crack it.

Can you or anyone show a wordlist and corresponding execution of john to crack the hash 
005f3942106f3bc5a392dcde686d87f0 and give the plaintext geländerxx?  I believe I should properly understand it from a working example.

 From: Stephen John Smoogen <>
Sent: Sunday, November 4, 2012 5:10 PM
Subject: Re: [john-users] Need help with hashes from isocode plaintext
On 4 November 2012 07:55, wfdawson <> wrote:
> I'm having some difficulty grasping how to make JtR work for hashes from unicode plaintext.  I'm sure I'm missing something very basic.

md5 does not do unicode. So the special a in there is going to be the
ansi interpretation of unicode.. the ansi characters 0xC3 and 0xA4

what I normally do is take a dictionary and then make sure I set the
--encoding to not be UTF-8 but ansi.. when dealing with md5sum.. then
the md5sum's of someone using unicode actually seem to come out.

> Working from this @PastbinDorks twitter feed:  For example, 005f3942106f3bc5a392dcde686d87f0 -- my attempts do not derive the plain 'geländerxx', presumably the plain for that hash.
> I've read but it was not helpful.  For one, using base64 to encode and then decode does not result in mangled text as that article demonstrated - on my system, anyway.  Manually converting the 'ä' (LATIN SMALL LETTER A WITH DIAERESIS) to "ä" within my wordlist doesn't work, either.
> I'm using the Gentoo JtR build (1.7.9-r5); I've also tried using unstable-jumbo cloned from github. My installed locales: en_US.UTF-8 and en_US (ISO-8859-1). My default locale is UTF-8.
> wordlist:
> geländerxx
> geländerxx
> hash file (first field articially generated for convenience:
> 45:005f3942106f3bc5a392dcde686d87f0
> $ john --session=h --wordlist=w --format=raw-md5 h
> Loaded 1 password hash (Raw MD5 [128/128 SSE2 intrinsics 8x])
> guesses: 0  time: 0:00:00:00 DONE (Sun Nov  4 10:37:25 2012)  c/s: 200  trying: geländerxx - geländerxx
> Any suggestions?
> Thanks.

Stephen J Smoogen.
"Don't derail a useful feature for the 99% because you're not in it."
Linus Torvalds
"Years ago my mother used to say to me,... Elwood, you must be oh
so smart or oh so pleasant. Well, for years I was smart. I
recommend pleasant. You may quote me."  —James Stewart as Elwood P. Dowd

Powered by blists - more mailing lists

Your e-mail address:

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.