|
Message-ID: <554F8F59.80701@web.de> Date: Sun, 10 May 2015 18:03:21 +0100 From: Demian Smith <demian.smith@....de> To: john-users@...ts.openwall.com Subject: Re: Advise on best approach (truecrypt pw based on pdf file) Hi Magnum, thanks for the truncate rule, I am running these now on the File generated, I might even (if it's not successful) on a bigger-ish file with the non-capital sentences as well. I have taken your advise and am running it with A-Z and have as well intentions to look into the "rules" doc to see what 5-9 in this instance means. john --wordlist=/home/Demian/RAID/txt/wpd8.txt --rules=truncate --session=truncate2 /home/Demian/RAID/recover -> 0g 52648p 0:00:07:24 47.43% (ETA: 18:10:31) 0g/s 118.3p/s 709.9c/s 709.9C/s AEaiitwAhbiapotwc..Awwmgdtcaahriafts So it might not take to long anyway... Thanks for your support and for keeping my hopes up =) Demian -- 'It's no measure of mental health to be well adjusted to a profoundly sick society.' Sinéad O'Connor ★ On 15/05/09 11:37 p.m. Magnum wrote ★ > On 2015-05-09 23:03, Demian Smith wrote: >>> Let's concentrate on wordlist rules. If it's indeed a partial >>> sentence, would you think it's truncated in the end and still >>> starting with an uppercase letter? >> >> It does start with a upper case letter, that's for sure. If I understand >> correctly, it would have been truncated at the end - if the original >> sentence would have been >>> To be or not to be, that is the question, and indeed a question which >>> shall >>> be answered, by this circle of fine man who gathered on this moonlit >>> December night >> >> It would be any of these >> Tbontb >> Tbontbtistq >> Tbontbtistqaiaqwsba >> Tbontbtistqaiaqwsbabtcofm >> and so on. > > So you wouldn't stop in the middle of a sub phrase (or whatever it's > called) ie. you wouldn't have used "Tbontbti"? That's hard to automate > so we'll probably just have to ignore it and try any truncations to eg. > 5-12 characters. > >>> Also, how large (number of lines) is that wordlist? Did you try >>> just running it with --rules (and perhaps --rules=single in another >>> run)? >> >> The list I have created by removing all lines starting with non capital >> letters is a whopping 3803 lines long, but the last lines are in the >> ranks of 50 and more chars (the longest being 97 chars). > > OK that's a small amount. We should be able to run that through a decent > number of permutations if needed. > >> After your pointer towards rules I have now cut the lines at 20 chars >> and am running it with the rules on the wordlist. I've not worked with >> rules either, would I have to write some useful ones (for my case) >> first? > > Here's a quick'n'dirty one: > > [List.Rules:truncate] >>[5-9A-C]'\0 > > Put the above in john.conf and use it with "--rules=truncate". For an > input word of Tbontbtistqaiaqwsbabtcofm it will output these 8 variations: > > Tbont > Tbontb > Tbontbt > Tbontbti > Tbontbtis > Tbontbtist > Tbontbtistq > Tbontbtistqa > > If you want longer than 12, change the 'C' in A-C. 5-9 means literally > 5-9, A means 10, B is 11 and so on so A-C here means a truncate at a > length of 10-12. I think you can actually use A-Z in this case and it > wont take too long. > > magnum > >
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.