Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Mon, 19 Oct 2009 21:18:30 -0500
From: "JFoug" <jfoug@....net>
To: <john-users@...ts.openwall.com>
Subject: Re: Joomla and JTR

From: "websiteaccess" <websiteaccess@...il.com>
> Is JTR able to crack Joomla hashes ?
>
> I use patched JTR with http://openwall.info/wiki/john/patches
>
> for example :   36302dcd47193e2c6dbc3cfc6f70e11d:KPAvp1xf0bQJppoU  =
> azerty

I receievd this query off list, and replied, but I am not sure if 
websiteaccess@...il.com
is a person, or if a reply works.

In the message I received was the comment:

> I try to use your contribution to JTR (john-1.7.3.1-all-5-md5_gen-2).

so I will assume that the generic md5 is built.  If that is the case, then 
the
proper line for the input file is:

user:md5_gen(1)36302dcd47193e2c6dbc3cfc6f70e11d$KPAvp1xf0bQJppoU

For all md5-gen, you will need the md5_gen(x) signature.  Then, a $ is used
to separate the hash from the salt, since they are needed to be in one unit,
and if a ':' was used, john through it's normal behavior would split that
into some other user gecos field.

Once the file is of that format, john will 'auto' detect and process.

Jim.



Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.