Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Mon, 4 Jun 2018 17:33:52 +0200
From: magnum <john.magnum@...hmail.com>
To: john-users@...ts.openwall.com
Subject: Re: Unusual rar hash output

On 2018-06-04 10:28, Артур Зартдинов wrote:
> I definitely recreated the file on ubuntu and the result was very similar,
> but with less directories listed. So why is this happening and how do I fix
> it?

Assuming you didn't screw up somehow, it's either a defective archive or 
some bug in rar2john. Please re-run the bleeding-jumbo version of 
rar2john like this:

./rar2john -v Ashax.rar >stdout.txt 2>stderr.txt

Then post both output files for us. Hopefully that will give us some hints.

magnum

> On Mon, Jun 4, 2018 at 10:23 AM, magnum <john.magnum@...hmail.com> wrote:
> 
>> On 2018-06-02 19:01, Артур Зартдинов wrote:
>>
>>> On windows I used the 1.8.0 jumbo version and on ubuntu I used the latest
>>> bleeding edge jumbo version from github.
>>>
>>
>> That Windows version you used is way too old too bother investigate. When
>> running on Ubuntu, did you re-create your input file with the newer
>> rar2john? If not, that's the problem.
>>
>> The "lots of file directories" are in fact a listing of files inside the
>> archive (similar to 'unrar l') for use as seed in single mode.
>>
>> magnum
>>
>>
>> On Sat, Jun 2, 2018 at 7:48 PM, Matus UHLAR - fantomas <uhlar@...tomas.sk>
>>> wrote:
>>>
>>> On 02.06.18 13:46, Артур Зартдинов wrote:
>>>>
>>>> I'm trying to crack a password from an old rar of mine. Whenever I run
>>>>> rar2john on my archive I get a very strange output (
>>>>> https://pastebin.com/hmN0iFNc) containing what looks like a rar3 hash
>>>>> and
>>>>> lots of file directories inside the rar itself. Running john on the file
>>>>> results in the "no password hash loaded" error. This doesn't seem to
>>>>> happen
>>>>> to freshly created test rar files. I've tried both windows and bootable
>>>>> ubuntu usb so far. Help is appreciated.
>>>>>
>>>>>
>>>> which version of john do you use?
>>>> --
>>>> Matus UHLAR - fantomas, uhlar@...tomas.sk ; http://www.fantomas.sk/
>>>> Warning: I wish NOT to receive e-mail advertising to this address.
>>>> Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
>>>> I intend to live forever - so far so good.
>>>>
>>>
>>>
>>
>>
> 


Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.