[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <5f4239741002220857k20258c0dpad691e1784c52dee@mail.gmail.com>
Date: Mon, 22 Feb 2010 10:57:21 -0600
From: Minga Minga <mingakore@...il.com>
To: john-users@...ts.openwall.com
Subject: Re: New updated lanman.chr based on RockYou Data
> Cool. Thankyou for outlining the methodology there. Does it change the
> .chr from say just generating the lanman.chr using the john.conf tool?
> I usually use that to generate .chr versus going through a loop to
> crack things.
As it turns out. It *does* make a difference how you generate the
CHR file.
I regenerated a test.chr using the following command (where
john.pot.LANMAN1 is a POT file made from the rockyou passwords,
converted to upper case, then a LM hash is created and placed
directly into john.pot).
../john --pot=john.pot.LANMAN1 --make-charset=test.chr
Using this method, I see this:
../john -i:rockyou-lanman-new -stdout | head -n 10
ER!
AN!
AN"
AD!
AD"
ES!
ES"
ER"
ON!
ON"
which is different than my previous results. I don't really know why.
(ER! does make a lot of sense in being first). I don't know which
method is 'right' or more-valid. But both are logical. I don't plan
on doing much more with this unless one method is proven to
be incorrect.
> Also have you figured out a good method to remove what looks like a
> bad database dump in some parts of the rockyou or do you keep that in
> there?
I responded to Alexander about this privately, guess I should have
CC'd the list.
Here is what I did to clean up the list.
1) removed all email addresses (even though some are likely passwords)
2) remove all strings longer than 20 chars (even though some are likely
passwords).
3) removed all HTML (such like this - sorry about the long-line)
<embed src="http://apps.rockyou.com/rockyou.swf?instanceid=<?=$instanceid?>"
quality="high" etc etc
4) removed all passwords with 'high-ascii'. Some international passwords
might get ignored. But I did not wish to include high ascii stuff.
-Minga
KoreLogic
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
