Date: Fri, 28 Apr 2017 22:44:46 +0200 From: Solar Designer <solar@...nwall.com> To: john-users@...ts.openwall.com Subject: Re: How to stop consideration of repeated characters Hello Bill, On Fri, Apr 28, 2017 at 01:30:40PM -0700, B B wrote: > I am new to JtR and am trying to recover a lost password for which I have both a probable beginning and end. I also have a limited character set for the middle of the password. > > I have been using Crunch to generate word lists but these lists have repeated characters such as [known}aaab[known]. I know for a fact there are NO repeated characters in my lost password but can not find any mention of a rule? to reject them. This is tricky and most likely unreasonable to do. What hash or file type are you attacking? How fast does the attack go? It is unlikely that reducing the keyspace by such a small margin is going to significantly improve your chances of cracking that password within the timeframe you're willing to allocate. > Another question, to get around the use of Crunch, is can I quote a fixed/known character string at the beginning and the end in a rule? > > Such as ???pass???A-z???word???? You don't need Crunch. With recent JtR -jumbo, you can achieve the same with its mask mode, e.g.: john -9='?l?u' --mask='pass?9?9?9?9word' passwd-file-here or e.g.: john -9='?l?u' --mask='pass?9?9[aeiou]?9word' passwd-file-here to restrict one of the characters to a smaller set. You can also use character ranges, etc. To likely significantly improve your chances, you can use e.g.: john --inc=alpha --min-len=12 --max-len=12 --mask='pass?wword' passwd-file-here so that the 4 character (in this example) portion in the middle is filled with character sequences sorted for decreasing estimated probability based on character frequencies in other passwords. Things like this can make far greater difference than omitting a small fraction of the keyspace would. Alexander
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.