john-users - Re: Need help with hashes from isocode plaintext

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <CANnLRdgLXHDHimNkLdH8GkXTTd+qEhf0=xt00xdXOhVA+twEcA@mail.gmail.com>
Date: Sun, 4 Nov 2012 15:10:26 -0700
From: Stephen John Smoogen <smooge@...il.com>
To: john-users@...ts.openwall.com
Subject: Re: Need help with hashes from isocode plaintext

On 4 November 2012 07:55, wfdawson <wfdawson@...lsouth.net> wrote:
> I'm having some difficulty grasping how to make JtR work for hashes from unicode plaintext.  I'm sure I'm missing something very basic.

md5 does not do unicode. So the special a in there is going to be the
ansi interpretation of unicode.. the ansi characters 0xC3 and 0xA4

what I normally do is take a dictionary and then make sure I set the
--encoding to not be UTF-8 but ansi.. when dealing with md5sum.. then
the md5sum's of someone using unicode actually seem to come out.


> Working from this @PastbinDorks twitter feed: http://t.co/DE3rWS2x.  For example, 005f3942106f3bc5a392dcde686d87f0 -- my attempts do not derive the plain 'geländerxx', presumably the plain for that hash.
>
> I've read http://www.ethicalhacker.net/content/view/341/2/ but it was not helpful.  For one, using base64 to encode and then decode does not result in mangled text as that article demonstrated - on my system, anyway.  Manually converting the 'ä' (LATIN SMALL LETTER A WITH DIAERESIS) to "&#228;" within my wordlist doesn't work, either.
>
> I'm using the Gentoo JtR build (1.7.9-r5); I've also tried using unstable-jumbo cloned from github. My installed locales: en_US.UTF-8 and en_US (ISO-8859-1). My default locale is UTF-8.
>
> wordlist:
>
> geländerxx
> gel&#228;nderxx
>
> hash file (first field articially generated for convenience:
> 45:005f3942106f3bc5a392dcde686d87f0
>
> $ john --session=h --wordlist=w --format=raw-md5 h
> Loaded 1 password hash (Raw MD5 [128/128 SSE2 intrinsics 8x])
> guesses: 0  time: 0:00:00:00 DONE (Sun Nov  4 10:37:25 2012)  c/s: 200  trying: geländerxx - gel&#228;nderxx
>
> Any suggestions?
>
> Thanks.



-- 
Stephen J Smoogen.
"Don't derail a useful feature for the 99% because you're not in it."
Linus Torvalds
"Years ago my mother used to say to me,... Elwood, you must be oh
so smart or oh so pleasant. Well, for years I was smart. I
recommend pleasant. You may quote me."  —James Stewart as Elwood P. Dowd

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.