[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Mon, 19 Nov 2012 17:47:52 -0700
From: Stephen John Smoogen <smooge@...il.com>
To: john-users@...ts.openwall.com
Subject: Re: Can I use the same .pot file for multiple cracking
sessions without overwrite or erase data?
On 19 November 2012 17:13, Rich Rumble <richrumble@...il.com> wrote:
> On Mon, Nov 19, 2012 at 5:45 PM, Stephen John Smoogen <smooge@...il.com> wrote:
>> They do not overwrite each other.. but if your two processes find the
>> same password.. you will end up with duplicates in the pot file.
> To clarify, if you have the same hash/password there won't be a
> duplicate in the POT.
> That is to say if MD5 hash and an MD4 hash that have the same
> password, the hashes are different, but the passwords are the same, it
> will contain a "duplicate" password, but for two different hashes. If
> you have a salted hash, and the same password gets cracked(2 or more
> times), the hash type is the same, but the salt is different, which
> will lead to a different hash+salt combination.
> (md5)5F4DCC3B5AA765D61D8327DEB882CF99:password
> (md4)8A9D093F14F8701DF17732B2BB182C74:password
>
> You should not get
> (md5)5F4DCC3B5AA765D61D8327DEB882CF99:password
> (md5)5F4DCC3B5AA765D61D8327DEB882CF99:password
> in the same pot file as far as I know... it should be "normalized" in
> that regard, no matter how many times you write to the pot.
> -rich
Actually you can do so in the way he is talking about having 2 john's
running at the same time on the same set of hashes. Let us say that
you have a fast hash that won't take advantage of multiple cores.. so
you decide to run
john --session=A --pot=raw-sha1.pot --format=raw-sha1 hashes.sort
--rules:jumbo --wordlist=/usr/share/dict/words
john --session=B --pot=raw-sha1.pot --format=raw-sha1 hashes.sort
--rules:korelogicrules --wordlist=/usr/share/dict/words
I believe john (at least til 1.7.6-jumbo-6 )only checks the pot file
when you start or restore the session so if both sets of rules were to
find the password hash
$dynamic_26$8e32f8b89684079780702b613828b97e04e4db7e:Abbotsford
it does seem to get written to the file both times.
--
Stephen J Smoogen.
"Don't derail a useful feature for the 99% because you're not in it."
Linus Torvalds
"Years ago my mother used to say to me,... Elwood, you must be oh
so smart or oh so pleasant. Well, for years I was smart. I
recommend pleasant. You may quote me." —James Stewart as Elwood P. Dowd
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
