[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-Id: <9B1ED232-E9DB-445B-89B5-B9E8466C0343@gmail.com>
Date: Mon, 28 Mar 2016 18:43:24 +0200
From: "websiteaccess@...il.com" <websiteaccess@...il.com>
To: john-users@...ts.openwall.com
Subject: Re: PDF and format
Update :
PDF has 14 parts
I have extracted hashes info with pdf2john for each part
Chapter_01.pdf:$pdf$2*3*128*-1340*1*16*9ed05403fd976c14437cd84232939944*:::::/Users/xxx/Desktop/Archive/Chapter_01.pdf
Chapter_02.pdf:$pdf$2*3*128*-1340*1*16*37a952c0d44c42f1806d4b21d38a0346*:::::/Users/xxx/Desktop/Archive/Chapter_02.pdf
Chapter_03.pdf:$pdf$2*3*128*-1340*1*16*d390e82d1a10d7b7d015a07250e61031*:::::/Users/xxx/Desktop/Archive/Chapter_03.pdf
Chapter_14.pdf:$pdf$4*4*128*-1340*1*16*6633c80281c94d8a66236ba4c1d6c30e*:::::/Users/xxx/Desktop/Archive/Chapter_14.pdf
Chapter_04.pdf:$pdf$2*3*128*-1340*1*16*1a778f64d760324721152a987a5a3415*:::::/Users/xxx/Desktop/Archive/Chapter_04.pdf
Chapter_05.pdf:$pdf$2*3*128*-1340*1*16*8e512efb9decde286ff5510eb2266769*:::::/Users/xxx/Desktop/Archive/Chapter_05.pdf
Chapter_06.pdf:$pdf$2*3*128*-1340*1*16*3c4b3a208b32ba2ab41eb1d1d82ec669*:::::/Users/xxx/Desktop/Archive/Chapter_06.pdf
Chapter_07.pdf:$pdf$2*3*128*-1340*1*16*4f8d9ae47faf9eeed66ed9829f80b697*:::::/Users/xxx/Desktop/Archive/Chapter_07.pdf
Chapter_08.pdf:$pdf$Standard$2*3*128*-1340*1*16*33770d9ad826f74644950d7717db7bec*32*e0a8a3ee8e4eec60bfc90a83da8e298000000000000000000000000000000000:::::/Users/xxx/Desktop/Archive/Chapter_08.pdf
Chapter_09.pdf:$pdf$Standard$2*3*128*-1340*1*16*2f54e32c5e3214d9564217ae066ea379*32*2987e39ce8196cf5ece8a9078d47c75f00000000000000000000000000000000:::::/Users/xxx/Desktop/Archive/Chapter_09.pdf
Chapter_10.pdf:$pdf$2*3*128*-1340*1*16*7766f6c1f545ead8c0b62dcc6fec292f*:::::/Users/xxx/Desktop/Archive/Chapter_10.pdf
Chapter_11.pdf:$pdf$2*3*128*-1340*1*16*98161c0ca6a6636e442fbda6028560a5*:::::/Users/xxx/Desktop/Archive/Chapter_11.pdf
Chapter_12.pdf:$pdf$2*3*128*-1340*1*16*ce425e776609d54593d35cf30b0acfc7*:::::/Users/xxx/Desktop/Archive/Chapter_12.pdf
Chapter_13.pdf:$pdf$2*3*128*-1340*1*16*fdc7a5feb959bf6e76e28ba95885365f*:::::/Users/xxx/Desktop/Archive/Chapter_13.pdf
Chapter_14.pdf:$pdf$4*4*128*-1340*1*16*6633c80281c94d8a66236ba4c1d6c30e*:::::/Users/xxx/Desktop/Archive/Chapter_14.pdf
as you can see chapter 08 and 09 are different.
I have tested
./john -format=pdf inc:alpha chapter.txt
Chapter_08.pdf:$pdf$Standard$2*3*128*-1340*1*16*33770d9ad826f74644950d7717db7bec*32*e0a8a3ee8e4eec60bfc90a83da8e298000000000000000000000000000000000:::::/Users/xxx/Desktop/Archive/Chapter_08.pdf
Chapter_09.pdf:$pdf$Standard$2*3*128*-1340*1*16*2f54e32c5e3214d9564217ae066ea379*32*2987e39ce8196cf5ece8a9078d47c75f00000000000000000000000000000000:::::/Users/xxx/Desktop/Archive/Chapter_09.pdf
I get
No password hashes loaded (see FAQ)
:-/
> Le 28 mars 2016 à 15:00, Rich Rumble <richrumble@...il.com> a écrit :
>
> On Mon, Mar 28, 2016 at 2:18 AM, websiteaccess@...il.com
> <websiteaccess@...il.com> wrote:
>> Hi guys
>>
>> I have extracted 1 PDF hash with pdf2john
>>
>> test.pdf:$pdf$2*3*128*-1340*1*16*7766f6c1f545ead8c0b62dcc6fec292f*:::::/Users/xxx/Desktop/test.pdf
> This should be all John needs to figure out the format (the $pdf$...)
> Your string however is much shorter than any of the TEST strings in JtR
> ./john.exe --list=format-tests | grep -F pdf$
> Was there any output from pdf2John that would indicate the PDF is
> incompatible with pdf2john?
> -rich
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
