Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Thu, 18 Aug 2016 08:22:07 +0200
From: Patrick Proniewski <patpro@...pro.net>
To: john-users@...ts.openwall.com
Subject: Re: how to use John to create more complex passwords

Hi,

On 18 août 2016, at 03:22, Liyan Cao wrote:

> I'd like to run John with a password list file to create another file with the passwords at least 8 alphanumeric characters. 


You'll probably need john Jumbo 1.8.x

Create a file with every word you want (mywords.txt) and use it with the --wordlist argument.
Use --min-length=8 to make sure candidates are at least 8 characters long.
Use --stdout to write candidates and put them into a file.
You can (should) add --rules to this command to create more candidates, like "wordlist" or "jumbo" for example.

Put it all together: 

./john --min-length=8 --wordlist=/path/to/mywords.txt --rules=wordlist --stdout > yourfinalresult.txt

or

./john --min-length=8 --wordlist=/path/to/mywords.txt --rules=jumbo --stdout > yourfinalresult.txt

Only "problem" I can see: you might end with candidates that are 8 or more characters long, but that include less than 8 alphanum characters, because some rules might add symbols. So it does not strictly abide by your requirement to have "at least 8 alphanumeric characters". 

Be careful with disk space, some rulesets can create millions of candidates with a single word. In my configuration, the ruleset "all" creates 7 millions candidates with the word "uppercut":

$ cat /tmp/uppercut 
uppercut

$ ./john --wordlist=/tmp/uppercut --min-length=8 --rules=all --stdout >/dev/null
Press 'q' or Ctrl-C to abort, almost any other key for status
7019761p 0:00:00:03 100.00% (2016-08-18 08:18) 2075Kp/s uppercut999999


pat

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.