Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sat, 9 Oct 2010 04:13:38 +0400
From: Solar Designer <solar@...nwall.com>
To: john-users@...ts.openwall.com
Subject: multi-word rules (was: Rule to replace strings)

On Fri, Oct 08, 2010 at 07:54:03PM -0400, Rich Rumble wrote:
> In this same vein,

Actually, I think this is a different topic, not closely related to this
thread's original Subject and requesting a different feature.  In fact,
you did not quote any context because there was nothing relevant to
quote.  So I would have preferred to see this in its own thread.  I've
merely changed the Subject now (but did not break the thread).

> when I encounter new clients I often find that the
> users place the company name used in users passwords along
> with dictionary words. Is there a good way to prefix and suffix these
> names to dictionary words and other mangling rules?
> I looked through our defcon crack me if you can threads, and we used a
> wordlist, but I don't remember doing much more than adding numbers
> to them, might not of needed much more then.

We used variations of this Perl script (referenced from the john-users
team writeup):

http://www.openwall.com/lists/john-users/2010/02/14/5

> Normally I generate new word-list based on company info... and
> I have a phrases dictionary were I find and replace
> company_xSux, company_xsucks, blows... f*ckCompany_x
> etc... Perhaps a way to combine two word lists (typically short 2-6
> chars)...

Yes, I agree that JtR should gain builtin multi-word support for
wordlist rules.  It already has this feature (for working with two words
at once) for "single crack" mode (in fact, it did since 1990s), but not
for wordlist mode yet.

Alexander

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.