Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Thu, 8 Jan 2015 14:29:09 -0500
From: Rafael Veras <>
Subject: Re: How to force John to count duplicate guesses?

Hi magnum,

Yes, I can build it myself. Can you point me to the file/function I need to

> The exact fix depends on your exact command line (-pipe, -stdin or pure
-wordlist, and
whether you use rules or not).

I don't use rules and prefer -stdin.



On Wed, Jan 7, 2015 at 9:15 PM, magnum <> wrote:

> On 2015-01-07 21:51, Rafael Veras wrote:
> > By the end of the experiment a get the following status line:
> >
> > 1956366g *7942070363p* 0:00:21:18 1530g/s 6214Kp/s 6214Kc/s 25268GC/s
> > lyngemita..LynGemItA
> >
> > In bold is the number of password candidates tried. I expected to see
> > 8000000000 there.
> >
> > After some toy experiments, I realized John might not be counting
> > candidates that were already tried.
> >
> > From the status lines, I generate a graph with the performance of
> guessing
> > methods. Not counting duplicates artificially boosts the performance of
> > this particular guessing method, in terms of hits/guesses.
> >
> > So is it possible to easily alter this behavior, either in john.conf or
> in
> > the source code?!
> Even without the --dupe-suppression option, *consecutive* dupes are
> suppressed and there is no option to turn that off. You can probably
> hack that away fairly easy - can you build John yourself? The exaxt fix
> depends on your exact command line (-pipe, -stdin or pure -wordlist, and
> whether you use rules or not).
> magnum

Powered by blists - more mailing lists

Your e-mail address:

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.