Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Mon, 5 Nov 2012 20:45:16 +0100
From: magnum <>
Subject: Re: Need help with hashes from isocode plaintext

On 5 Nov, 2012, at 2:41 , wfdawson <> wrote:
> On 4 November 2012 07:55, wfdawson <> wrote:
>> I'm having some difficulty grasping how to make JtR work for hashes from unicode plaintext.  I'm sure I'm missing something very basic.
> md5 does not do unicode. So the special a in there is going to be the
> ansi interpretation of unicode.. the ansi characters 0xC3 and 0xA4

Some systems actually do an MD5 of UTF-16 encoded plaintext, which I guess is what Stephen meant by "unicode". Our 'raw-md5u' format supports that format. Also, 0xC3, 0xA4 is UTF-8, not ANSI. The "ANSI codepage" normally refers to iso-8859-1. Then it's a single 0xE4.

> Thanks for your comments.  I'm sorry if I'm a bit obtuse on this question - ordinarily, I would not have such difficulties.  Unfortunately, I'm still not able to crack it.
> Can you or anyone show a wordlist and corresponding execution of john to crack the hash 
> 005f3942106f3bc5a392dcde686d87f0 and give the plaintext geländerxx?  I believe I should properly understand it from a working example.

$ echo -n geländerxx | iconv -t utf-8 | md5sum 

OK, so it's not UTF-8. My second guess would be cp1252 or iso-8859-1 (they are the same for this letter):

$ echo -n geländerxx | iconv -t iso-8859-1 | md5sum 

There you have it. Note the '-n' option to echo. Without it you will get a totally different MD5 because you will include a linefeed in the hashed string.


Powered by blists - more mailing lists

Your e-mail address:

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.