[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <20100322175515.GA26527@openwall.com>
Date: Mon, 22 Mar 2010 20:55:15 +0300
From: Solar Designer <solar@...nwall.com>
To: john-users@...ts.openwall.com
Subject: Re: raw-md5 from unicode string
On Mon, Mar 22, 2010 at 04:09:41PM +0100, drobik wrote:
> is possible to use JtR to get password from raw-md5 hash, when md5
> hash is computed from unicode string ?
What character encoding, specifically? It sounds like you're trying to
represent your string in UCS-2, but is that what you really need? As
W.A. has correctly pointed out, UTF-8 would work just fine - of course,
if that's what your hash was calculated from.
> I tried to solve this problem by using external rule (to insert \x00
> after every char), but it doesn't work.
> It looks like \x00 works as string terminator for JtR in this case.
Indeed.
> Is something wrong with my external rule
It's precisely what you suspected - you can't embed a NUL byte in a string.
> or is another way to solve this problem?
You need to start by defining the problem fully. If you do need to
embed NUL bytes, then you'll have to modify the source code for JtR (or
for a specific "format"). Maybe do it the way NTLM hashes are
implemented in the jumbo patch (they have to expand the string to UCS-2
internally).
> I tried to use simplel perl script to insert \x00 char after every
> char from password, but it's little bit slow (probably perl script
> isn't too fast):
> john --incremental=lanman --external=myfilter --stdout | perl
> insert00.pl | john --stdin passwd.txt
This is not just slow, it also "does not work", for the same reason
(can't have embedded NUL bytes in wordlist entries).
Alexander
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
