[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <CABtNtWEYrvrPPXLLu70+3GSn4y5LZM5uOjiK=VN7V7m=R1xaUQ@mail.gmail.com>
Date: Mon, 25 May 2015 09:57:50 +0800
From: Kai Zhao <loverszhao@...il.com>
To: john-dev@...ts.openwall.com
Subject: Fuzzing Report on wordlist, rules, chr
1. Fuzz wordlist
---------------------
I use some of the wordlist from the website as input cases:
http://www.openwall.com/wordlists/
Add __afl_manual_init() before do_wordlist_crack();
if (options.flags & FLG_WORDLIST_CHK) {
__afl_manual_init();
do_wordlist_crack(&database, options.wordlist,
(options.flags & FLG_RULES) != 0);
}
Command:
afl-fuzz -i input_cases/ -o out ../john test_pw --nolog --wordlist=@@
Speed: about 100~200/sec
Run time: more than two days
Unique crashes: 0
2. Fuzz rules
---------------------
Fuzz config rules: single mode and wordlist mode.
For single mode:
I create several rules based on the original john.conf as input cases. Then,
comment the line below in john.c to speed up fuzzing.
cnt = dynamic_Register_formats(&selfs);
// cnt = dynamic_Register_formats(&selfs);
cnt = 0;
Command:
afl-fuzz -i input_cases/ -o out -f rules.conf ../john test_pw --nolog
--single --config=local.conf
Speed: about 400~600/sec (without asan), 50/sec (with asan).
Run time: more than three days
Unique crashes: 0
3. Fuzz chr
---------------------
Fuzz chr should use the incremental mode which takes more time, so
the speed is very slow. Comment the line below in john.c to speed up
fuzzing.
cnt = dynamic_Register_formats(&selfs);
// cnt = dynamic_Register_formats(&selfs);
cnt = 0;
The incremental part of local.conf:
[Incremental:LanMan]
File = fuzz.chr
MinLen = 0
MaxLen = 7
CharCount = 132
Command:
afl-fuzz -t 1500+ -m none -i input_cases/ -o out -f fuzz.chr ../john ppww
--nolog --skip-self-test --format=md5crypt --incremental=Lanman
--config=local.conf --max-run-time=1
Speed: about 1~10/sec (without asan), 0.9/sec (with asan).
Run time: more than two days
Unique crashes: 0
Thanks,
Kai
Content of type "text/html" skipped
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
