Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <004b01cb7f0a$1ac91f60$505b5e20$@ihug.co.nz>
Date: Mon, 8 Nov 2010 18:59:28 +1300
From: "Al Grant" <acgrant@...g.co.nz>
To: <john-users@...ts.openwall.com>
Subject: RE: Wordlist Mangling Rule

Thanks Solar Designer,

The rule was more designed around the assumption that most residential AP's
protected with WPA etc
Probably have a 8 character or shorter word, possibly beginning with a
capital, and if not 8 digits then made
To come to 8 by adding the appropriate number of digits, probably 123 etc.

Do that make a rule any simpler to generate?

Cheers

-Al
  

-----Original Message-----
From: Solar Designer [mailto:solar@...nwall.com] 
Sent: Sunday, 7 November 2010 2:41 a.m.
To: john-users@...ts.openwall.com
Subject: Re: [john-users] Wordlist Mangling Rule

On Sat, Nov 06, 2010 at 02:04:39PM +1300, Al Grant wrote:
> 1.Upper Case First Letter
> 2.Lower Case Whole Word
> 3.Upper Case Whole Word
[...]
> Then I want to add numbers to the end of each word so that it becomes 
> 8 characters long.
[...]
> Ie a four letter word gets 1234 added to the end. A 6 letter word just 
> gets
> 12 added. An 8 letter word gets nothing added. 
> 
> And the number appending should be applied to each of the first 3 
> rules in addition to the rules .
> 
> No word mangled or not, should be less than 8 characters, and maximum 
> of 10 characters.

I find the above a bit inconsistent, but here you are:

[List.Rules:Wordlist]
-\r[c:c] <B >7 \p[clu]
-\r[c:c] <8 >6 \p[clu] $[0-9]
-\r[c:c] <7 >5 \p[clu] Az"[0-9][0-9]"
-\r[c:c] <6 >4 \p[clu] Az"[0-9][0-9][0-9]"
-\r[c:c] <5 >3 \p[clu] Az"[0-9][0-9][0-9][0-9]"

This includes some extra complexity to deal with case-insensitive hashes
optimally.  If you don't need that, or if you're using an older version of
JtR that does not understand the '\r' flag, you can simplify to:

<B >7 [clu]
<8 >6 [clu] $[0-9]
<7 >5 [clu] Az"[0-9][0-9]"
<6 >4 [clu] Az"[0-9][0-9][0-9]"
<5 >3 [clu] Az"[0-9][0-9][0-9][0-9]"

There's no performance difference between these two with case-sensitive
hashes, but the first one is up to 3x faster for case-insensitive.

Alexander

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.