[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-Id: <a57d6ea48c626ea2.560b8e53@limbe.rz.uni-konstanz.de>
Date: Wed, 30 Sep 2015 09:25:07 +0200
From: "Michael Kramer" <michael.kramer@...-konstanz.de>
To: john-dev@...ts.openwall.com
Subject: Re: Kerberoast for John
Am Montag, 28. September 2015 22:59 CEST, magnum <john.magnum@...hmail.com> schrieb:
> > I've included the fmt_plug file for John, a testfile with 3
> > testhashes the module is able to crack, and also part of the python
> > script from Tim Medin to parse kirbi files into the format my John
> > module uses.
>
> You should include all three as test vectors. After doing so, you'll
> find that the format fails self-tests as written. It may crack that test
> file but it's flawed and will not always work.
I've encluded three test vectors now. It seems to work this time.
>
> > But I've encountered a strange bug and thought maybe one of you could
> > help me.
>
> There are many bugs ;-) I think you need to do the following, for a starter:
>
> 1. Change BINARY_SIZE to 0 and replace binary with fmt_default_binary.
> Have a look at some other format with a binary size of 0.
Done that.
> 2. Change salt to a struct holding both the salt and what you are now
> putting in the binary (so this becomes a "salt-only" format, or a
> non-hash as we use to call them). Then of course change SALT_SIZE to
> sizeof that struct.
Done that as well.
> 3. Adjust everything accordingly. Drop the binary_hash/get_hash
> functions (use fmt_default_* in the format struct).
Done that as well :)
> 4. Replace <openssl/rc4.h> with "rc4.h" (a local file in the tree)
If I replace this I get a segmentationfault. With the openssl/rc4.h it works. Any idea why that occurs?
> Also, you should rename src/kirbi_export.py to run/kirbi2john.py per our
> conventions.
I've renamed and edited the license for the python script as well.
Attached you'll find the salt-only module and the renamed Python script.
But the bug I encountered before is still there. After 17 hours I get 500p/s...
Greetings,
Michael Kramer
View attachment "kirbi2john.py" of type "text/x-python" (1915 bytes)
View attachment "krb5_tgs_fmt_plug.c" of type "text/x-csrc" (15349 bytes)
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
