|
Message-ID: <d20627bfde2b366efab420185d0701a1@smtp.hushmail.com> Date: Sun, 6 Jan 2013 01:49:22 +0100 From: magnum <john.magnum@...hmail.com> To: john-users@...ts.openwall.com Subject: Re: Reject words based on length without modifying rules/wordlists On 6 Jan, 2013, at 0:07 , Rich Rumble <richrumble@...il.com> wrote: > Say I have -w=rockyou.txt and I don't want to edit all of the "Jumbo" > rules to reject words if less than 8. Would it be best to create a > filter() that possibly rejects words that are 7 or less characters? Or > should I create a new wordlist that only contains passwords of a > certain length or more? I also realize that a rule may be appending or > prefixing characters to words so I may want to decrease to 6 or more, > but for now I'm generalizing at 8 in wordlist mode. I'd rather not > edit every rule, and I'd rather not have all of these copies of my > wordlists broken down by lengths. I'm sure I could use > awk/sed/perl/etc... to stdin/pipe as well, but most windows users > don't have those at the ready. I'm curious about an efficient solution > to knowing you won't encounter passwords of less than X length. I > didn't find much in the archives about it, so please let me know if > I've missed something previously addressing such a question. I looked > at "[List.External:Filter_LanMan]" but it's the opposite I want as far > as the length part goes... and the filter_policy modes I didn't see > length as an item they were checking for, but I have no idea what I'm > doing so they very well could check for a certain length :) I recently added a --min-length=N option to Jumbo unstable, that will skip (as opposed to truncate) words less than N characters. For wordlist with rules, this will happen after rules are applied. Is this what you're asking for? magnum
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.