Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Wed, 14 Oct 2015 18:52:07 +0200
From: magnum <>
Subject: Re: Apache HTDigest Files

On 2015-10-12 01:13, C64 Whiz wrote:
> I have an Apache Digest password file of the form:
>      username:The Realm:md5_hashxxxxxxxx
> and I can't find any format John (Jumbo 1.7.9) supports to work these
> files.  I saw the HDAA format and the "Dynamic_28" format for Apache MD5,
> but neither work (no hashes found).  No such luck with on-line searches and
> I'm left thinking I need to make a custom Dynamic_XXXX format for this.
> But considering this is such a simple, and popular, format I'd be surpised
> JTR doesn't handle this already.
> What am I missing?

Using a fairly recent version of bleeding jumbo from GitHub, you can use 
the ad-hoc dynamic format like this:

$ cat

$ ./john -form:dynamic='md5($u.$c1.$s.$c1.$p),c1=\x3a'
Using default input encoding: UTF-8
Loaded 1 password hash (dynamic=md5($u.$c1.$s.$c1.$p) [128/128 AVX 4x3])
Press 'q' or Ctrl-C to abort, almost any other key for status
magnum           (user)
1g 0:00:00:00 DONE 2/3 (2015-10-14 18:50) 100.0g/s 250900p/s 250900c/s 
250900C/s 123456..phillips


Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.