Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Thu, 14 May 2015 02:32:37 +0200
From: magnum <john.magnum@...hmail.com>
To: john-users@...ts.openwall.com
Subject: Re: Advise on best approach (truecrypt pw based on pdf
 file)

On 2015-05-13 23:19, Demian Smith wrote:
> still working on my truecrypt hash - in the meantime I have converted
> all pdfs in a folder to txt and created the "first letter only" candidates.
>
> I am currently running the truncate rule that magnum thankfully provided
> me with on the wordlist (>[4-9A-Z]'\0 )
>
> As this had not been succesful yet even though I assume the correct pdf
> had been used I was wondering could a rule be written to do the
> "opposite" of truncate?
>
> So instead of truncating
> Abcdefgeh to Abcd | Abc | Ab it would start from the back and
> "truncates" to fgeh | geh | ge instead. I hope by doing so I fetch out
> the stuff I have not tested as yet, in case I started at some random
> spot in the sentence...

Here's a shot from the hip. I half heartedly tossed things together and 
it (seemingly) started working much sooner than I expected:

[List.Rules:substring]
 >[4-9A-Z] val\0 Xal0 '\0 >[3-9A-Y]'\p[4-9A-Z]

The above expands to 1024 rules. It appears to produce all combinations 
of min. length 4 except the full original word. I did not test it other 
than the below:

$ ../run/john -pipe -rules:substring -stdout <<< Abcdefgh
efgh
defg
defgh
cdef
cdefg
cdefgh
bcde
bcdef
bcdefg
bcdefgh

magnum

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.