Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sun, 23 Jul 2023 21:22:30 +0000
From: luke me <lukeme386@...look.com>
To: "john-users@...ts.openwall.com" <john-users@...ts.openwall.com>
Subject: RE: John completes job immediately without result?

The job exits in less than a second, it is not feasible it would compare the hash of 14M password in this fraction of a second
The job simply does not run, therefore I am asking if there is a bug because it simply does not run


-----Original Message-----
From: Matus UHLAR - fantomas <uhlar@...tomas.sk> 
Sent: 23 July 2023 16:37
To: john-users@...ts.openwall.com
Subject: Re: [john-users] John completes job immediately without result?

On 22.07.23 20:30, luke me wrote:
>I hashed PKZIP file with zip2john from the latest release and produced hash file: sales.txt. The hash is extremely long 1.1MB, when I initiate 'john' using wordlist (rockyou) it exits immediately with status 'complete'.
>This takes 1 sec, or less and no password or any update it provided it the hash file. It appears the job exits with no result. The job simply does not run.
>I am using Win10, but get same result on Ubuntu.
>
>Question: is a very long hash value produced by zip2john normal? I believe the file was zipped using PKZIP2 in deflated compression mode.
>
>> john --wordlist=rockyou.txt sales.txt
>Using default input encoding: UTF-8
>Loaded 1 password hash (PKZIP [32/64])
>Will run 4 OpenMP threads
>Press 'q' or Ctrl-C to abort, 'h' for help, almost any other key for 
>status 0g 0:00:00:01 DONE (2023-07-22 20:08) 0g/s 10696Kp/s 10696Kc/s 10696KC/s "2flower"..7¡Vamos!
>Session completed.

john tried all passwords in rockyou.txt, neither matched, job done.

try adding "--rules" option, it will try the same list of passwords sligtly changed.
But if the password is NOT in the rockyou.txt, john will NOT find it.

>Is this a bug or is the ZIP file produced with unsupported version of PKZIP?

it's a bug in your expectations from john.
--
Matus UHLAR - fantomas, uhlar@...tomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Due to unexpected conditions Windows 2000 will be released in first quarter of year 1901

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.