Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [day] [month] [year] [list]
Date: Sat, 30 Apr 2022 08:52:04 +0200
From: "Johny Krekan" <>
To: "" <>
Subject: Re: Way to create specific wordlist

Hello, I exactly did it yesterday. First using sqllitetools I dumped 
original database to text. Later I have created simple script which 
extracted the password part from each line.
Then I tested it against one UPC hash which of course could not   be 
cracked using any password from that list (it would be then too much simple:
today I can continue forward.

>Rich Rumble
>29. 4. 2022 15:20
>Why not Download the SQLite database that has all the passwords in it
>And since it's just the uppercase alphabet letters, you can use
>I dumped the passes from their sql like this:
>sqlite SELECT orig from "wifi"; >keys.txt
>You could extract those, and create an INCREMENTAL mode based on them, as
>the frequency that letters appear near each other might be optimized
>better, but I'm not sure with a keyspace this small if it makes a real
>difference. The length is 8 (min and max) it won't take long. Bue here is
>how you could do this:
>Use -make-charset
>sed 's/^/:/' < keys.txt >upcubee.pot
>./john -pot=upcubee.pot -make-charset=upcubee.chr
>Loaded 16777216 plaintexts
>Generating charsets........................ DONE
>Generating cracking order..---- Stable order (6 recalculations)
>Successfully wrote charset file: upc.chr (26 characters)
>The .chr file is much smaller than the 151Mb of the plaintext passwords
>from that DB they provide.
>Add that to your john.conf and then use the incremental mode on it.
>File = $JOHN/upcubee.chr
>MinLen = 8
>../john -i=upcubee hashes.txt
>On Thu, Apr 28, 2022 at 8:58 AM Krekan <> wrote:
>> Hello, I would like to ask what options of John could I use to make
>> wordlist
>> which will contain 8 character combinations which can contain each
>> character
>> only once or twice. For example word specific is not good only for 
>> specifgh. Every character from the charset can be used only once or twice
>> in
>> password candidate. This is useful for testing strength of UPC
>> networks
>> passwords which are created in such way.
>> For more explanation look at:
>> Example passwords shown there are of a kind which I would like to create
>> using
>> John.
>> Thanx for help
>> Johny Krekan
>> ---
>> New Outlook Express and Windows Live Mail replacement - get it here:

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.