Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sun, 4 Nov 2012 17:41:32 -0800 (PST)
From: wfdawson <wfdawson@...lsouth.net>
To: "john-users@...ts.openwall.com" <john-users@...ts.openwall.com>
Subject: Re: Need help with hashes from isocode plaintext

Thanks for your comments.  I'm sorry if I'm a bit obtuse on this question - ordinarily, I would not have such difficulties.  Unfortunately, I'm still not able to crack it.


Can you or anyone show a wordlist and corresponding execution of john to crack the hash 
005f3942106f3bc5a392dcde686d87f0 and give the plaintext geländerxx?  I believe I should properly understand it from a working example.



________________________________
 From: Stephen John Smoogen <smooge@...il.com>
To: john-users@...ts.openwall.com 
Sent: Sunday, November 4, 2012 5:10 PM
Subject: Re: [john-users] Need help with hashes from isocode plaintext
 
On 4 November 2012 07:55, wfdawson <wfdawson@...lsouth.net> wrote:
> I'm having some difficulty grasping how to make JtR work for hashes from unicode plaintext.  I'm sure I'm missing something very basic.

md5 does not do unicode. So the special a in there is going to be the
ansi interpretation of unicode.. the ansi characters 0xC3 and 0xA4

what I normally do is take a dictionary and then make sure I set the
--encoding to not be UTF-8 but ansi.. when dealing with md5sum.. then
the md5sum's of someone using unicode actually seem to come out.


> Working from this @PastbinDorks twitter feed: http://t.co/DE3rWS2x.  For example, 005f3942106f3bc5a392dcde686d87f0 -- my attempts do not derive the plain 'geländerxx', presumably the plain for that hash.
>
> I've read http://www.ethicalhacker.net/content/view/341/2/ but it was not helpful.  For one, using base64 to encode and then decode does not result in mangled text as that article demonstrated - on my system, anyway.  Manually converting the 'ä' (LATIN SMALL LETTER A WITH DIAERESIS) to "ä" within my wordlist doesn't work, either.
>
> I'm using the Gentoo JtR build (1.7.9-r5); I've also tried using unstable-jumbo cloned from github. My installed locales: en_US.UTF-8 and en_US (ISO-8859-1). My default locale is UTF-8.
>
> wordlist:
>
> geländerxx
> geländerxx
>
> hash file (first field articially generated for convenience:
> 45:005f3942106f3bc5a392dcde686d87f0
>
> $ john --session=h --wordlist=w --format=raw-md5 h
> Loaded 1 password hash (Raw MD5 [128/128 SSE2 intrinsics 8x])
> guesses: 0  time: 0:00:00:00 DONE (Sun Nov  4 10:37:25 2012)  c/s: 200  trying: geländerxx - geländerxx
>
> Any suggestions?
>
> Thanks.



-- 
Stephen J Smoogen.
"Don't derail a useful feature for the 99% because you're not in it."
Linus Torvalds
"Years ago my mother used to say to me,... Elwood, you must be oh
so smart or oh so pleasant. Well, for years I was smart. I
recommend pleasant. You may quote me."  —James Stewart as Elwood P. Dowd

Powered by blists - more mailing lists

Your e-mail address:

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.