Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Mon, 24 Jun 2013 19:58:00 +0200
From: Jan Starke <jan.starke@...ofbed.org>
To: john-users@...ts.openwall.com
Subject: Re: Fuzzing with regular expressions

Hi magnum,

rexgen 'M[üö]ller'

works. You can also combine UTF-8 characters of multiple length:

rexgen 'M[uüö\u1234]ller'

whatever \u1234 may be. Possibly Mr. Muller knows it ;-)

Thanks for the literature list.

Kind regards, Jan


2013/6/24 magnum <john.magnum@...hmail.com>

> On 24 Jun, 2013, at 8:43 , Jan Starke <jan.starke@...ofbed.org> wrote:
> > rexgen does now support UTF-8 input, so for example
> > rexgen 'M(ü|ö|ue|oe)ller'
> > generates all 4 variants of this surname.
>
> Considering users might not know which characters are multibyte or not,
> would
>
> rexgen 'M[üö]ller'
>
> work? I can accept if it doesn't but it's good to know. If the input line
> is first converted to UTF16 or UTF32 before parsing, this is probably not
> even a challenge, it should work just fine.
>
> > In order to integrate rexgen into JtR, what was the necessary
> requirements
> > to the library? I'm currently thinking of
> > - state serialization (for "john --restore")
> > - ... ?
> >
> > Can you give me a good starting point into john's code, to read how those
> > features of password generators are invoked by john?
>
> A very short file adding "mask mode" was given here:
> http://www.openwall.com/lists/john-dev/2013/06/15/1
>
> It lacks resume and some other stuff but it shows the basics. For complete
> modes with resume, progress and node/fork support, see mkv.c or inc.c. Or
> even wordlist.c but that file is a total mess in Jumbo :-)
>
> magnum
>

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.