Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Wed, 23 May 2018 17:03:19 +0200
From: Solar Designer <>
Subject: Re: john --make-charset=custom.chr: Can't get the hang of using it. :-(

On Wed, May 23, 2018 at 03:48:19PM +0100, Eric Watson wrote:
> I read somewhere in the john documents that there was a manual in 
> another group such as raspberry Pi but the advice was not to read it but 
> to use the documents instead. If you wish I will post the location 
> if/when I come across it again.

Oh, you probably mean my own recent comments about the Debian man page.
Yes, I recommend reading our documentation under doc/ instead of that
unofficial man page.

> May I continue with this query?


> The password in question contains one or two numerical strings of known 
> length and known numerals. It also contains words of known length and 
> characters. It also contains two *, ! characters.
> The words may be capitalised and in any position as the numerical 
> strings could also be.

If you can arrive at a reasonably small number of different masks that
represent your possible passwords, then I recommend that you use mask
mode (run it multiple times with the different masks).  For example:

./john --mask='[Ff]irstword197[0-4][Ss]econdword123[*!][*!]' passwd

and so on for other word orderings, etc.

> I tried the method, (actually just before receiving you reply):
> echo :AbCdEf > john.pot
> ./john --make-charset=custom.chr
> It resulted in the numbers being treated individually which made me ask 
> about a 'group' set.

You may also try training incremental mode on multiple samples similar
to your password - not on mere lists of characters.


Powered by blists - more mailing lists

Your e-mail address:

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.