[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 16 May 2023 13:50:22 +0200
From: Solar Designer <solar@...nwall.com>
To: john-users@...ts.openwall.com
Cc: jeff <jeff@...funit.com>
Subject: Re: rule for password with control characters
On Mon, May 15, 2023 at 08:19:31PM -0700, jeff wrote:
> I have a password that I can't crack. I know it is no more than 8
> characters, and I have tried all printable characters.
> I would like to include control characters.
> I made a rule for this, but it isn't working.
> Here is the rule:
>
> [List.Rules:ins_control_1]
> # jtd truncate to 7, insert at pos x with control
> '7i0[^$][\x7f\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f]
>
> I want to truncate my wordlist to 7 characters and insert a control
> character.
> I would like to include x7f and x01..x1f
Your rule line above is wrong. You can try these instead:
[List.Rules:ins_control_1]
'7 i[0-7][\x7f\x01-\x1f]
[List.Rules:rep_control_1]
'8 o[0-7][\x7f\x01-\x1f]
or better yet, optimized versions that produce fewer duplicates (skip
trying to insert or overstrike way beyond input word length):
[List.Rules:ins_control_1]
>\r[00-6] '7 i\p[0-7][\x7f\x01-\x1f]
[List.Rules:rep_control_1]
>[0-7] '8 o\0[\x7f\x01-\x1f]
Since you're cracking descrypt hashes, you may also want to include
\x80, which gets processed by descrypt as NUL:
[List.Rules:ins_control_1]
>\r[00-6] '7 i\p[0-7][\x7f\x80\x01-\x1f]
[List.Rules:rep_control_1]
>[0-7] '8 o\0[\x7f\x80\x01-\x1f]
You don't strictly need those truncations at '7 or '8 when running
against descrypt - the resulting string will be truncated anyway.
> K:\password-cracking\john-1.9.0-jumbo-1-win64_xxx\run>john-avx.exe
When using our Windows builds of JtR, we recommend that you run the
generic john.exe program so that it can transparently run the right
fallback program for your CPU if needed. By directly running
john-avx.exe, you might be missing opportunity to get e.g. AVX2 code
running on your CPU (if supported).
> Invalid rule in (null) at line 4017: Unknown command '7i0^???
We have a bug in the error reporting there, causing this "in (null)" in
place of "in john.conf" or such. We ought to fix that.
Line 4017 suggests you probably had this in john.conf. You can instead
create the file john-local.conf and put your local additions in there -
should be easier to edit.
> Any advice would be appreciated.
We made some relevant improvements since the 1.9.0-jumbo-1 release,
including faster descrypt on CPU with OpenMP. You can try a newer build
linked from the "Download Windows Build" badge in README.md at
https://github.com/openwall/john
Alexander
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
