[<prev] [next>] [day] [month] [year] [list]
Message-ID: <BLU0-SMTP1161F5C1CA3F830E6ED062DFDD70@phx.gbl>
Date: Fri, 13 Jul 2012 22:51:46 +0200
From: Frank Dittrich <frank_dittrich@...mail.com>
To: john-dev@...ts.openwall.com
Subject: More features for MJohn
Aleksey,
I think we still need something to keep all
clients busy doing something useful, may be a way to configure a client
to automatically fetch new attack descriptions and run them.
Letting the clients instead of the server initiate the connection will
help in a contest environment, where many users may be behind a NAT router.
This minimal functionality is a first step. An enhanced version should
take into account number of CPUs/GPUs, amount of main memory, free disk
space, to descide which kind of formats to attack, how many attacks to
run in parallel, and so on.
E.g., for a CPU with 4 cores and hyperthreading, useful options would be:
-just 1 session at a time with OMP_NUM_THREADS=4, for highly optimized
formats that scale well.
-just 1 session at a time with (default for such a machine)
OMP_NUM_THREADS=8, for formats that support OMP, but are not optimized
-4 different sessions for formats that are optimized, but don't scale
well with OMP or lack OMP support (in this case, a john build without
OMP support should be used).
-just 1 session, but split across 4 cores (requires --fork= / --nodes=
to be supported)
There is no need to implement everything at once.
Start with just fetching a task from the server that has not been
started, mark it as started on the server.
To define priorities for the tasks (which tasks to run/transfer to a
(/which) client in what sequence), we either need some voting system, or
we need to set priority based on success of previous attacks defined by
the same user.
Measuring/comparing the success might be tricky, because usually success
changes over time.
When you start, it is easy to crack passwords, then it gets harder until
you identify a new pattern, and so on.
The voting can also be mimicked by an assessment at the begin of the
pen test / contest (which formats will be the easiest to attack first /
which formats will likely give most points).
Frank
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
