john-users - Re: Right Format to Load IPB hashes in JtR

Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <1338789783.84133.YahooMailNeo@web120704.mail.ne1.yahoo.com>
Date: Sun, 3 Jun 2012 23:03:03 -0700 (PDT)
From: NeonFlash <psykosonik_frequenz@...oo.com>
To: "john-users@...ts.openwall.com" <john-users@...ts.openwall.com>
Subject: Re: Right Format to Load IPB hashes in JtR

Ok, I think I found a workaround.

To display the cracked hashes in the format:

hash:password

one can format the file containing the hashes as shown below:

hash hash$salt

and then crack them using:

./john --format=dynamic_12 --field-separator-char=" " -w:wordlist.txt IPB.txt

once the hashes are cracked, you can display the cracked hashes using:

./john --format=dynamic_12 --show --field-separator-char=" " IPB.txt

It works now :)



________________________________
 From: NeonFlash <psykosonik_frequenz@...oo.com>
To: "john-users@...ts.openwall.com" <john-users@...ts.openwall.com> 
Sent: Monday, June 4, 2012 10:59 AM
Subject: Re: [john-users] Right Format to Load IPB hashes in JtR
 
I already have some hashes cracked in POT File:

$dynamic_12$c38c6304cd49dc2002cc55dc295704c3$R"p+(:Matthew1
$dynamic_12$2ebd7b40a1524a95e76f20fc63dc8e2b$f[q<a:dallas12
$dynamic_12$442f17ca82e93f2856b7e9806909a1a7$k"Bf]:hallo123
$dynamic_12$a7a48eaca37895868c27930fbcaf7623$6+@x(:deathwish
$dynamic_12$d32e72ee3ea712862c9144e81dbf6bc0${K}}Q:onions
$dynamic_12$62407a6e30d83e141ab2e2a0f75aeaf3$RA]w&:onions

in this format.

Also, I have modified my IPB.txt file to contain the hashes in the following format:

hash$salt


Now, when I want to display the cracked hashes like this:

john -show --format=dynamic_12 IPB.txt

it does not display. 

Probably, because while parsing the POT File these cracked hashes appear with the $dynamic_12$ prefix.

The problem is, if I try to display the cracked hashes otherwise when my IPB.txt file contains the hashes in the format with a $dynamic_12$ prefix, the result is as shown below:

?:Matthew1
?:dallas12
?:hallo123
?:deathwish
?:onions
?:onions

Is there a way to display the cracked hashes in the format:

hash:password?

Thanks.



________________________________
From: Frank Dittrich <frank_dittrich@...mail.com>
To: john-users@...ts.openwall.com 
Sent: Monday, June 4, 2012 10:47 AM
Subject: Re: [john-users] Right Format to Load IPB hashes in JtR

On 06/04/2012 06:58 AM, NeonFlash wrote:
> Ok, I just tried with the following format:
> 
> $dynamic_12$b1e8eaa9725156b6c617a065dd05772b$3{8|d
> $dynamic_12$eb6c6407b4dcc0ea703231c77758e013$g~A.}
> $dynamic_12$e72f3f18e6f9cc212a4ff9f5a09b7eb1$J-uvO
> 
> Using "$" as the separator char between the hash and the salt works.

$ ./john IPB.txt --format=dynamic_12

would even work with this format:

b1e8eaa9725156b6c617a065dd05772b$3{8|d
eb6c6407b4dcc0ea703231c77758e013$g~A.}
e72f3f18e6f9cc212a4ff9f5a09b7eb1$J-uvO

or

user:b1e8eaa9725156b6c617a065dd05772b$3{8|d
user2:eb6c6407b4dcc0ea703231c77758e013$g~A.}
another_user:e72f3f18e6f9cc212a4ff9f5a09b7eb1$J-uvO

In this file

1e8eaa9725156b6c617a065dd05772b:3{8|d
eb6c6407b4dcc0ea703231c77758e013:g~A.}
e72f3f18e6f9cc212a4ff9f5a09b7eb1:J-uvO

the colon would be treated as separator between user name ans hash.
That's why john didn't load the hashes.


Frank
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.