Date: Mon, 19 Nov 2012 17:47:52 -0700 From: Stephen John Smoogen <smooge@...il.com> To: john-users@...ts.openwall.com Subject: Re: Can I use the same .pot file for multiple cracking sessions without overwrite or erase data? On 19 November 2012 17:13, Rich Rumble <richrumble@...il.com> wrote: > On Mon, Nov 19, 2012 at 5:45 PM, Stephen John Smoogen <smooge@...il.com> wrote: >> They do not overwrite each other.. but if your two processes find the >> same password.. you will end up with duplicates in the pot file. > To clarify, if you have the same hash/password there won't be a > duplicate in the POT. > That is to say if MD5 hash and an MD4 hash that have the same > password, the hashes are different, but the passwords are the same, it > will contain a "duplicate" password, but for two different hashes. If > you have a salted hash, and the same password gets cracked(2 or more > times), the hash type is the same, but the salt is different, which > will lead to a different hash+salt combination. > (md5)5F4DCC3B5AA765D61D8327DEB882CF99:password > (md4)8A9D093F14F8701DF17732B2BB182C74:password > > You should not get > (md5)5F4DCC3B5AA765D61D8327DEB882CF99:password > (md5)5F4DCC3B5AA765D61D8327DEB882CF99:password > in the same pot file as far as I know... it should be "normalized" in > that regard, no matter how many times you write to the pot. > -rich Actually you can do so in the way he is talking about having 2 john's running at the same time on the same set of hashes. Let us say that you have a fast hash that won't take advantage of multiple cores.. so you decide to run john --session=A --pot=raw-sha1.pot --format=raw-sha1 hashes.sort --rules:jumbo --wordlist=/usr/share/dict/words john --session=B --pot=raw-sha1.pot --format=raw-sha1 hashes.sort --rules:korelogicrules --wordlist=/usr/share/dict/words I believe john (at least til 1.7.6-jumbo-6 )only checks the pot file when you start or restore the session so if both sets of rules were to find the password hash $dynamic_26$8e32f8b89684079780702b613828b97e04e4db7e:Abbotsford it does seem to get written to the file both times. -- Stephen J Smoogen. "Don't derail a useful feature for the 99% because you're not in it." Linus Torvalds "Years ago my mother used to say to me,... Elwood, you must be oh so smart or oh so pleasant. Well, for years I was smart. I recommend pleasant. You may quote me." —James Stewart as Elwood P. Dowd
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.