[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Thu, 29 Jul 2010 22:41:48 -0400
From: Rich Rumble <richrumble@...il.com>
To: john-users@...ts.openwall.com
Subject: 1337 aka Leet Rules
I would like to share with everyone some rules that have proven successful
against our users, some additional substitutions that Jtr doesn't have by
default. In addition to the below, I'd like to ask if there is a way to memorize
a word and not have all instances of that letter changed, but rather think of it
as a case variance, where you replace the first e with a 3 but not the second
or third in a word. Then replace the second e with a 3, but not the first or
last, then the last and finally the others (1&3, 1&2, 2&3 and 123).
r3member, rem3mber, rememb3r, r3memb3r, r3m3mber, rem3mb3r, r3m3mb3r
Anyway, here are the wordlist rules that have helped me crack a ton of weak
passwords, a lot are due to just appending and pre-pending numbers.
I'm sure they are not the most efficient, and I do have an issue with my "i"
substitution, "si!" errors my john.conf file so I haven't figured out how to
escape the exclamation point.
[List.Rules:w00t]
l$[0-9]$[0-9]
l$[0-9]$[0-9]$[0-9]
l$[0-9]$[0-9]$[0-9]$[0-9]
l^[0-9]^[0-9]
l^[0-9]^[0-9]^[0-9]
l^[0-9]^[0-9]^[0-9]^[0-9]
l/asa4
l/asa@
l/ese3
l/gsg9
l/isi|
l/lsl1
l/lsl|
l/oso0
l/sss$
l/sss5
l/tst+
l/tst7
l/a/esa4se3
l/a/esa@se3
l/a/gsa4sg9
l/a/gsa@sg9
l/a/lsa4sl1
l/a/lsa@sl1
l/a/osa4so0
l/a/osa@so0
l/a/ssa4ss$
l/a/ssa@ss$
l/e/gse3sg9
l/e/lse3sl1
l/e/ose3so0
l/e/sse3ss$
l/l/gsl1sg9
l/l/gsl|sg9
l/l/osl1so0
l/l/osl|so0
l/l/ssl1ss$
l/l/ssl|ss$
l/o/gso0sg9
l/o/sso0ss$
l/o/sso0ss5
l/a/e/gsa4se3sg9
l/a/e/gsa@...sg9
l/a/e/lsa4se3sl1
l/a/e/lsa@...sl1
l/a/e/osa4se3so0
l/a/e/osa@...so0
l/a/e/ssa4se3ss$
l/a/e/ssa@...ss$
l/a/l/gsa4sl1sg9
l/a/l/gsa@...sg9
l/a/l/osa4sl1so0
l/a/l/osa4sl|so0
l/a/l/osa@...so0
l/a/l/osa@...so0
l/a/l/ssa4sl1ss$
l/a/l/ssa4sl|ss$
l/a/l/ssa@...ss$
l/a/l/ssa@...ss$
l/a/o/gsa4so0sg9
l/a/o/gsa@...sg9
l/a/o/ssa4so0ss5
l/a/o/ssa@...ss$
l/a/o/ssa@...ss5
l/a/s/gsa4ss$sg9
l/a/s/gsa@...sg9
l/e/l/gse3sl1sg9
l/e/l/ose3sl1so0
l/e/l/ose3sl|so0
l/e/l/sse3sl1ss$
l/e/l/sse3sl|ss$
l/e/o/gse3so0sg9
l/e/o/sse3so0ss$
l/e/o/sse3so0ss5
l/e/s/gse3ss$sg9
l/l/o/gsl1so0sg9
l/l/o/gsl|so0sg9
l/l/o/ssl1so0ss$
l/l/o/ssl1so0ss5
l/l/s/gsl1ss$sg9
l/l/s/gsl|ss$sg9
l/o/s/gso0ss$sg9
l/o/s/gso0ss5sg9
l/a/e/l/osa4se3sl1so0
l/a/e/l/osa4se3sl|so0
l/a/e/l/osa@...sl1so0
l/a/e/l/osa@...sl|so0
l/a/e/l/ssa4se3sl1ss$
l/a/e/l/ssa4se3sl|ss$
l/a/e/l/ssa@...sl1ss$
l/a/e/l/ssa@...sl|ss$
l/a/e/o/ssa4se3so0ss5
l/a/e/o/ssa@...so0ss$
l/a/e/o/ssa@...so0ss5
l/a/l/o/ssa4sl1so0ss5
l/a/l/o/ssa@...so0ss$
l/a/l/o/ssa@...so0ss5
l/e/l/o/sse3sl1so0ss$
l/e/l/o/sse3sl1so0ss5
l/e/l/o/sse3sl|so0ss$
l/e/l/o/sse3sl|so0ss5
l/a/e/l/o/ssa4se3sl1so0ss5
l/a/e/l/o/ssa4se3sl|so0ss5
l/a/e/l/o/ssa@...sl1so0ss$
l/a/e/l/o/ssa@...sl1so0ss5
l/a/e/l/o/ssa@...sl|so0ss$
l/a/e/l/o/ssa@...sl|so0ss5
Thanks!
-rich
Xinn.org
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
