Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sun, 27 May 2018 12:12:34 +0200
From: Solar Designer <solar@...nwall.com>
To: john-users@...ts.openwall.com
Subject: Re: john --make-charset=custom.chr: Can't get the hang of using it. :-(

On Sun, May 27, 2018 at 01:28:13AM +0100, Eric Watson wrote:
> I am struggling with making a suitable mask having tried numerous attempts.
> 
> I am trying to achieve:
> 
> ./john --mask'[*!][Ff]irrstword followed by a known number such as 11334 
> but could also be 43311 followed by [*!][Ss]econdword followed by 11334 
> or 43311' passwd
> 
> The number digits would not change and would always be in the same order 
> following the first and second word so could be treated as a "word".
> 
> The firstwordnumber and secondwordnumber could also be reversed ie.
> 
> ./john --mask'[*!][Ss]econdword followed by 11334 or 43311 
> [*!][Ff]irrstword followed by 11334 or 43311' passwd
> 
> I assume this would need two passes, one for each combination?

If I understood you correctly, it's these 8 masks:

[*!][Ff]irstword11334[*!][Ss]econdword11334
[*!][Ff]irstword11334[*!][Ss]econdword43311
[*!][Ff]irstword43311[*!][Ss]econdword11334
[*!][Ff]irstword43311[*!][Ss]econdword43311
[*!][Ss]econdword11334[*!][Ff]irstword11334
[*!][Ss]econdword11334[*!][Ff]irstword43311
[*!][Ss]econdword43311[*!][Ff]irstword11334
[*!][Ss]econdword43311[*!][Ff]irstword43311

To use them with JtR, you can use this lengthy command-line in bash:

while read mask; do ./john --mask="$mask" passwd; done < masks.txt

or you can do the 8 invocations of JtR manually, substituting the
different masks in there (if so, use single quotes around the masks to
prevent the shell's processing of special characters in there).

You can also choose to optimize for fewer masks, given that the number
of different candidate passwords to test is low anyway (let the computer
waste some time, instead of wasting your own time):

./john --mask='[*!][Ff]irstword[14][13]3[31][41][*!][Ss]econdword[14][13]3[31][41]' passwd
./john --mask='[*!][Ss]econdword[14][13]3[31][41][*!][Ff]irstword[14][13]3[31][41]' passwd

This will test a total of 8192 candidate passwords instead of only 128,
but either is a low number for a computer.

Alexander

Powered by blists - more mailing lists

Your e-mail address:

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.