[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-Id: <8EA77765-8288-4C89-AF9F-B373F3D268B9@thireus.com>
Date: Mon, 10 Sep 2012 22:38:13 +0200
From: "Thireus (thireus.com)" <contact@...reus.com>
To: john-users@...ts.openwall.com
Subject: Re: MPI with incremental mode working fine?
Hi again,
I come back with an example that just happened right now with incremental and MPI x8.
...
superpassword80 (abc@....xom)
superpassword09 (celine@....com)
alphonce2012 (fonce@....com)
superpassword09 (abc@....xom)
superpassword09 (celine@....com)
85azzJoa (pepe@....com)
So the first two passwords were found with an interval of 0.5 second. The third one came after about 20 seconds. The next two others which are similar to the two first one came after 1 minute... then nothing else... john.pot just get filled 5 minutes later.
If MPI is not working with incremental mode, why is the second alphonce2012 missing?? Umh... unless I'm missing the point that john.pot is not the right place where MPI processes share their work to avoid duplicated passwords to pop-up...
(john.pot is filled every 20 minutes)
Thireus (contact@...reus.com),
IT Security and Telecommunication Engineering Student at ENSEIRB-MATMECA & Master 2 CSI University of Bordeaux 1 (Bordeaux, France).
http://blog.thireus.com
Le 10 sept. 2012 à 22:21, Thireus (Thireus.com) <contact@...reus.com> a écrit :
> Hi everyone,
>
> I was wondering if the current MPI implementation is working fine with incremental mode.
> I have just created a new custom incremental mode based on a custom generated charset.
>
> [Incremental:custom]
> File = $JOHN/custom.chr
> MinLen = 8
> MaxLen = 16
> CharCount = 94
>
> And I notice from the john output that I have duplicated passwords. As far as I can tell some passwords (not all) are repeated/calculated twice.
> Because I'm using saved sessions, I would like to know if there's a way to check that the password space is well divided in 8 parts. How can I manage to check this from the session.X.rec files ?
>
> I currently have some clues about this issues... but there are just suppositions:
>
> 1- MPI not working at all for incremental mode, and because passwords are saved into john.pot every 10 minutes, the current 4 cores are desynchronized leaving only 1 core (2 threads) to be the leader, so that's why passwords are found twice.
> 2- The algorithm does not split very well the password space.
> 3- My saved sessions are corrupted.
>
> I have this issue under john-1.7.9-jumbo-6 and john-1.7.9-jumbo-5, I have not tested other releases.
>
> Also does the MPI implementation depend of the used hash format? (I had to create a custom dynamic hash algorithm)
>
> Thanks for your replies :)
>
> Regards,
> Thireus (contact@...reus.com),
> IT Security and Telecommunication Engineering Student at ENSEIRB-MATMECA & Master 2 CSI University of Bordeaux 1 (Bordeaux, France).
> http://blog.thireus.com
>
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
