[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <5303F721.8060304@atenlabs.com>
Date: Tue, 18 Feb 2014 16:13:21 -0800
From: Dan Tentler <dan@...nlabs.com>
To: john-users@...ts.openwall.com
Subject: Re: need to find a way to crack passwords with 16 to
20 length
To this end I've often wondered myself if there was a way to use a
wordlist as a charset, meaning to target passphrases versus words
I work for a pentesting company and I'm often found needing a way to
crack very long passwords that are built using words.
Company name, days of the week, phrases used around the office etc, all
strung together, sometimes with symbols separating words, capitals, and
numbers tossed on the end of the string.
>From a purely entropy standpoint it outwardly seems like it would be
'less work', but I haven't figured out a easy way to do it.
So I'm all ears :)
-Dan
On 2/18/14, 2:02 PM, B O wrote:
> Hi,
>
> I'm totally new at this and no programmer. I need to find a way to crack a
> password hash between 16 -20 length. I know the first 6 and need a way to
> have jtr work the rest using the incremental mode.
> Charset includes upper and lower case alpha numeric.
>
> If the known 6 are "Jtrjtr"
>
> One way is to brute force all the combinations. Say starting with
> Jtrjtraaaaaaaaaaa to Jtrjtr0000000000000
> And a faster approach may be no 2 adjacent chars will be the same, as in
> Jtrjtrab........................ not Jtrjtraa.......................
> Jtrjtr1a........................ not Jtrjtr11......................
>
>
> I tried the wordlist approach but there are way too many combinations,
> wordlist file/files are huge, not enough space on my disks, crunch says
> several petabytes
>
> Being new at this I really don't know if I'm asking for too much.
> Any help is appreciated.
>
> Cem.
>
>
>
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
