|
Message-ID: <5008403D.5050507@mail.ru> Date: Thu, 19 Jul 2012 19:13:33 +0200 From: Alex Kornilov <alex.kornilov3@...l.ru> To: john-users@...ts.openwall.com Subject: Re: john with Apple Keychains (/Users/Alex/Library/Keychains/login.keychain) On 7/19/12 6:46 PM, Dhiru Kholia wrote: thank you for your help > Which Operating System are you using? You might be able to use > pre-compiled JtR versions depending on your OS. OS X Lion > > For cracking OS X Keychains (which you seem to be doing) you need > jumbo version of john. You can get it from > https://github.com/magnumripper/magnum-jumbo. After doing "git clone", > build john, run keychain2john program on login.keychain.bak file and > then run john on the output of keychain2john. > > Another option is to obtain OS X hashes (using lion2john.pl program, > included with john-jumbo) and crack those to figure out the login > password. This option will be way faster than trying to crack the > Keychain. > > (Compile keychain2john using command "gcc keychain2john.c") this way don't work: $ ./lion2john.pl /Users/Alex/Library/Keychains/login.keychain.bak Could not find a Mac OS X 10.7 Lion salted SHA-512 hash in file: /Users/Alex/Library/Keychains/login.keychain.bak $ pwd /Users/Alex/Desktop/magnumripper-magnum-jumbo-06444ba/run second try: $ gcc keychain2john.c $ ./a.out /Users/Alex/Library/Keychains/login.keychain.bak > /tmp/john $ john --wordlist=/Users/Alex/Downloads/wordlist_john/Wordlists-20031009/all.lst /tmp/john No password hashes loaded (see FAQ) also doesn't work. Alex
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.