[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <ddb7e1cd82e62e3b7776cd0e8558f8e3@smtp.hushmail.com>
Date: Sun, 16 Feb 2014 21:02:32 +0100
From: magnum <john.magnum@...hmail.com>
To: john-users@...ts.openwall.com
Subject: Re: Where's the tool wpapcap2john?
On 2014-02-16 20:12, Lars Wegerich wrote:
> As far as I understood, john is capable to use existing wordlists and
> use some inbuild or customizable rules to "mangle" new passphrases
> which are checked against a password file. Is this correct so far?
They are checked against a password hash file (your wording confused me
at first) but that is what you meant.
> Right now I'm using an english and a german dictionary with thousands
> of entries as input wordlists.
>
> The command
>
> john --wordlist=dictionaries.lst --rules mypasswd
Note: Maybe you just left it out above, but you'll likely need to run
"./john" or "some/path/john" so you don't end up running Kali's old john
binary.
> will use the dictionary wordlists and the inbuild rules in
> /etc/john/john.conf, correct?
Yes. Try to get the bash completion running (sudo make bash-completion)
and then try hitting TAB twice after "--rules=" to see some other rule
sets. If you use eg. "--rules=jumbo" you'll get a lot more permutations.
IRL you would try this before running wordlists:
./john --single hashfile
The "single mode" is relatively quick and will (in case of WPA) make
lots of permutations of the SSID, which just might pay off.
> I think I will start with this one and I'll see if I'm successful.
>
> Guess, some social engineering will help as well to expand the
> dictionaries for example with strange pet names or nicknames.
Some googling will give you lists of names, animals, cities, lakes,
brands, sports teams, slang and whatever you can think of. Also try to
get hold of the "Rockyou list" (google that, and have a good look at the
"SkullSecurity" result). If you like this game you might want to join us
in next hash cracking contest - stay tuned!
magnum
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
