john-users - Re: Re: Testing john

Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Tue, 31 Mar 2020 23:15:11 +0200
From: Michele <micheluzzo@...entati.org>
To: john-users@...ts.openwall.com
Subject: Re: Re: Testing john

Hi Claudio and all

Thanks, I've learnt a lot!

The three methods work for me too, though --prince took an oddly longer 
time (0:00:03:13 vs 0:00:00:05 for --rules=all and 0:00:00:00 for 
--mask). Why is that so different from your results too? (John the 
Ripper 1.9.0-jumbo-1 here, if it helps)

I notice that none of the three options are anywhere in the offical doc. 
I understand I should go through the community resources.

As for the suggestion of Lorenzo, "zip-opencl" is not among the formats 
or subformats I can select, so jtr produces an error. Might be in the 
bleeding-jumbo just announced?

Thanks both and all
Michele

On 31/03/20 20:11, Claudio André wrote:
> Em ter., 31 de mar. de 2020 às 14:37, Michele <micheluzzo@...entati.org>
> escreveu:
>
>> On 31/03/20 15:52, Claudio André wrote:
>>
>>> I was testing on a sample zip file I created. I chose 'test1234' as
>> password.
>> Please share the zip files (and hashes) in the mailing list. And the
>> command line you are using. So, we can test/check them.
>>
>>
> Hi
>
> These are the commands - I show them for gwyddion.* only:
>> $ john-the-ripper.zip2john gwyddion.zip > gwyddion.hash
>> $ john-the-ripper gwyddion.hash
>>
>> which is the main session (note that zip2john is named
>> john-the-ripper.zip2john because I installed the snap app for Ubuntu),
>>
> Thanks. You all (we have 5k active users).
>
>
>> dictionaries/john.txt is basically the default dictionary (an old version
>> probably). Anyway, the result is the same when using --wordlist only.
>>
>> $ grep test dictionaries/john.txt
>> test
>> test123
>> test1
>> testing
>> test2
>> test3
>> tester
>> testi
>> testtest
>>
>> Find the files attached.
>>
>
>> Is there something I am missing or it just is how it is?
> Using the wordlist seeing in your message, I expect JtR to behave as it
> did.
> Ok, let's say we remember something about your lost password, so I can try
> a better cracking session. E.g.:
>
> Using --mask
> ```
> $ john --wordlist=john.txt gwyddion.hash gwyddion2.hash --mask=?w?d
> Using default input encoding: UTF-8
> Loaded 2 password hashes with 2 different salts (ZIP, WinZip [PBKDF2-SHA1
> 128/128 SSE2 4x])
> Will run 2 OpenMP threads
> Press 'q' or Ctrl-C to abort, almost any other key for status
> test1234         (gwyddion2.zip/gwyddion)
> test1234         (gwyddion.zip/gwyddion)
> 2g 0:00:00:00 DONE (2020-03-31 14:56) 7.692g/s 384.6p/s 769.2c/s 769.2C/s
> test1..12347
> Use the "--show" option to display all of the cracked passwords reliably
> Session completed
> ```
>
> Using --rules
> ```
> $ john --wordlist=john.txt gwyddion.hash gwyddion2.hash --rules=all
> Using default input encoding: UTF-8
> Loaded 2 password hashes with 2 different salts (ZIP, WinZip [PBKDF2-SHA1
> 128/128 SSE2 4x])
> Will run 2 OpenMP threads
> Press 'q' or Ctrl-C to abort, almost any other key for status
> test1234         (gwyddion2.zip/gwyddion)
> test1234         (gwyddion.zip/gwyddion)
> 2g 0:00:00:04 DONE (2020-03-31 15:01) 0.4587g/s 469.7p/s 939.4c/s 939.4C/s
> test..stesting
> Use the "--show" option to display all of the cracked passwords reliably
> Session completed
> ```
>
> Using --prince after I added 1234 to your wordlist
> ```
> $ john --prince=john.txt gwyddion.hash gwyddion2.hash
> Using default input encoding: UTF-8
> Loaded 2 password hashes with 2 different salts (ZIP, WinZip [PBKDF2-SHA1
> 128/128 SSE2 4x])
> Will run 2 OpenMP threads
> Press 'q' or Ctrl-C to abort, almost any other key for status
> test1234         (gwyddion2.zip/gwyddion)
> test1234         (gwyddion.zip/gwyddion)
> 2g 0:00:00:00 DONE (2020-03-31 15:04) 3.921g/s 1152p/s 2305c/s 2305C/s
> test1..1234123412341234
> Use the "--show" option to display all of the cracked passwords reliably
> Session completed
> ```
> --------------------------------------
>
> Can you see? You "chose a bad way home". But, IMO, everything is Ok.
>
> Claudio
>
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.