Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sun, 16 Feb 2014 21:02:32 +0100
From: magnum <john.magnum@...hmail.com>
To: john-users@...ts.openwall.com
Subject: Re: Where's the tool wpapcap2john?

On 2014-02-16 20:12, Lars Wegerich wrote:
> As far as I understood, john is capable to use existing wordlists and
> use some inbuild or customizable rules to "mangle" new passphrases
> which are checked against a password file. Is this correct so far?

They are checked against a password hash file (your wording confused me 
at first) but that is what you meant.

> Right now I'm using an english and a german dictionary with thousands
> of entries as input wordlists.
>
> The command
>
> john --wordlist=dictionaries.lst --rules mypasswd

Note: Maybe you just left it out above, but you'll likely need to run 
"./john" or "some/path/john" so you don't end up running Kali's old john 
binary.

> will use the dictionary wordlists and the inbuild rules in
> /etc/john/john.conf, correct?

Yes. Try to get the bash completion running (sudo make bash-completion) 
and then try hitting TAB twice after "--rules=" to see some other rule 
sets. If you use eg. "--rules=jumbo" you'll get a lot more permutations.

IRL you would try this before running wordlists:

./john --single hashfile

The "single mode" is relatively quick and will (in case of WPA) make 
lots of permutations of the SSID, which just might pay off.

> I think I will start with this one and I'll see if I'm successful.
>
> Guess, some social engineering will help as well to expand the
> dictionaries for example with strange pet names or nicknames.

Some googling will give you lists of names, animals, cities, lakes, 
brands, sports teams, slang and whatever you can think of. Also try to 
get hold of the "Rockyou list" (google that, and have a good look at the 
"SkullSecurity" result). If you like this game you might want to join us 
in next hash cracking contest - stay tuned!

magnum

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.