Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Mon, 19 May 2014 09:23:57 -0700
From: NRO117GM <nro117gm@...il.com>
To: john-users@...ts.openwall.com, "Richard B. Tilley" <brad@....us>
Subject: Re: Question on Wordlist Combinatorials

Please unsubscribe me from this list



On March 22, 2014 at 11:40:42 AM, Richard B. Tilley (brad@....us) wrote:

On Sat, Mar 22, 2014 at 03:09:49PM +1100, Nima Talebi wrote: 
> Hi! 
> 
> I'm wondering if there is an efficient way to achieve the following: 
> 
> Given the word "password123", I would like a single rule to produce: 
> 
> password 123 
> passwordOneTwo3 
> passwordOne2Three 
> password1TwoThree 
> passwordOne23 
> password1Two3 
> password12Three 
> passwordOneTwoThree 
> 
> ..plus all the various casings such as all lower-case for each spelled out 
> numeric token, plus all upper case for example, but say not "OnE" or "OnE". 
> 
> The `[]' construct allows me to construct numerous words based on a single 
> rule, for example: 
> 
> */1 Dp Ap/[Oo]ne/* 
> */2 Dp Ap/[Tt]wo/* 
> */3 Dp Ap/[Tt]hree/* 
> 
> ...however that's still going to need a great number of rules to achieve 
> what I'm after. 
> 
> In bash I can do this quite simply by using the `{}' constructs: 
> 
> *$ printf "%s\n" password{1,{o,O}ne,ONE}{2,{T,t}wo,TWO}{3,{T,t}hree,THREE}* 
> password123 
> password12Three 
> password12three 
> password12THREE 
> password1Two3 
> password1TwoThree 
> password1Twothree 
> password1TwoTHREE 
> password1two3 
> password1twoThree 
> password1twothree 
> password1twoTHREE 
> password1TWO3 
> password1TWOThree 
> password1TWOthree 
> password1TWOTHREE 
> passwordone23 
> passwordone2Three 
> passwordone2three 
> passwordone2THREE 
> passwordoneTwo3 
> passwordoneTwoThree 
> passwordoneTwothree 
> passwordoneTwoTHREE 
> passwordonetwo3 
> passwordonetwoThree 
> passwordonetwothree 
> passwordonetwoTHREE 
> passwordoneTWO3 
> passwordoneTWOThree 
> passwordoneTWOthree 
> passwordoneTWOTHREE 
> passwordOne23 
> passwordOne2Three 
> passwordOne2three 
> passwordOne2THREE 
> passwordOneTwo3 
> passwordOneTwoThree 
> passwordOneTwothree 
> passwordOneTwoTHREE 
> passwordOnetwo3 
> passwordOnetwoThree 
> passwordOnetwothree 
> passwordOnetwoTHREE 
> passwordOneTWO3 
> passwordOneTWOThree 
> passwordOneTWOthree 
> passwordOneTWOTHREE 
> passwordONE23 
> passwordONE2Three 
> passwordONE2three 
> passwordONE2THREE 
> passwordONETwo3 
> passwordONETwoThree 
> passwordONETwothree 
> passwordONETwoTHREE 
> passwordONEtwo3 
> passwordONEtwoThree 
> passwordONEtwothree 
> passwordONEtwoTHREE 
> passwordONETWO3 
> passwordONETWOThree 
> passwordONETWOthree 
> passwordONETWOTHREE 
> $ 
> 
> I'm hoping there is a nice way to do this in JtR - is there? 
> 
> Thankyou! 

Nima, 

You may consider just using bash and passing the results to john via --stdin or --pipe. Many people use this approach. 

Brad 


Powered by blists - more mailing lists

Your e-mail address:

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.