Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Mon, 25 Jan 2021 19:35:48 +0100
From: Johny Krekan <>
Subject: Re: source of information for John's charset files

I understand right that the list rockyou which you used had duplicate 
words for example 2x word example in it. My question is what is the 
reason or advantage of using such wordlist with duplicates in comparison 
with wordlist with no duplicates? If I create one .pot file from the 
rockyou with no duplicates would it provide worse probability in finding 
the password during same time as yours?

Dňa 25. 1. 2021 o 15:52 Solar Designer napísal(a):
> Hi Johny,
> On Mon, Jan 25, 2021 at 03:11:57PM +0100, Johny Krekan wrote:
>> Every .chr file which is used in John was generated from some .pot file
>> which contained lots of words/passwords.
> Right.  All of the .chr files supplied with JtR were generated from the
> same source - a fake .pot file containing the RockYou list, including
> duplicates.  I think the RockYou list is no longer redistributed that
> way (with the duplicates intact), but if desired this can be recreated
> from the "with counts" version of the list found on the SkullSecurity
> wiki.  The .chr files were made different through use of different word
> filters, which are included as external modes in john.conf.
> The included "makechr" script can be used to regenerate the .chr files
> using whatever filters john.conf defines (with names matching that
> script's embedded regexp) and whatever happens to be in john.pot.  Since
> a few new filters were added since, I expect this will generate more
> .chr files now.  Some of those might not make sense for actual use -
> especially the recently added Filter_NoRepeats and Filter_Repeats were
> not intended for generating .chr files.  Their resulting .chr files
> won't strictly result in (no) repeated characters despite of the names,
> but would probably have biases that do reflect the names, which might or
> might not be useful.
> Alexander

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.