[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <CAFMma9Myqcf8yCaYovbGmvf0sjAAHOGFxed5HJoXPmHi-rD4yg@mail.gmail.com>
Date: Wed, 21 Nov 2012 10:29:11 -0600
From: Richard Miles <richard.k.miles@...glemail.com>
To: john-users@...ts.openwall.com
Subject: Re: Can I use the same .pot file for multiple cracking
sessions without overwrite or erase data?
Thanks Rich and Stephen for clarification, very appreciated. :)
On Mon, Nov 19, 2012 at 6:47 PM, Stephen John Smoogen <smooge@...il.com>wrote:
> On 19 November 2012 17:13, Rich Rumble <richrumble@...il.com> wrote:
> > On Mon, Nov 19, 2012 at 5:45 PM, Stephen John Smoogen <smooge@...il.com>
> wrote:
> >> They do not overwrite each other.. but if your two processes find the
> >> same password.. you will end up with duplicates in the pot file.
> > To clarify, if you have the same hash/password there won't be a
> > duplicate in the POT.
> > That is to say if MD5 hash and an MD4 hash that have the same
> > password, the hashes are different, but the passwords are the same, it
> > will contain a "duplicate" password, but for two different hashes. If
> > you have a salted hash, and the same password gets cracked(2 or more
> > times), the hash type is the same, but the salt is different, which
> > will lead to a different hash+salt combination.
> > (md5)5F4DCC3B5AA765D61D8327DEB882CF99:password
> > (md4)8A9D093F14F8701DF17732B2BB182C74:password
> >
> > You should not get
> > (md5)5F4DCC3B5AA765D61D8327DEB882CF99:password
> > (md5)5F4DCC3B5AA765D61D8327DEB882CF99:password
> > in the same pot file as far as I know... it should be "normalized" in
> > that regard, no matter how many times you write to the pot.
> > -rich
>
> Actually you can do so in the way he is talking about having 2 john's
> running at the same time on the same set of hashes. Let us say that
> you have a fast hash that won't take advantage of multiple cores.. so
> you decide to run
>
> john --session=A --pot=raw-sha1.pot --format=raw-sha1 hashes.sort
> --rules:jumbo --wordlist=/usr/share/dict/words
> john --session=B --pot=raw-sha1.pot --format=raw-sha1 hashes.sort
> --rules:korelogicrules --wordlist=/usr/share/dict/words
>
> I believe john (at least til 1.7.6-jumbo-6 )only checks the pot file
> when you start or restore the session so if both sets of rules were to
> find the password hash
>
> $dynamic_26$8e32f8b89684079780702b613828b97e04e4db7e:Abbotsford
>
> it does seem to get written to the file both times.
>
> --
> Stephen J Smoogen.
> "Don't derail a useful feature for the 99% because you're not in it."
> Linus Torvalds
> "Years ago my mother used to say to me,... Elwood, you must be oh
> so smart or oh so pleasant. Well, for years I was smart. I
> recommend pleasant. You may quote me." —James Stewart as Elwood P. Dowd
>
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
