john-users - RE: how to use John to create more complex passwords

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <CO2PR07MB25528088246B0D160A7786DCD3150@CO2PR07MB2552.namprd07.prod.outlook.com>
Date: Thu, 18 Aug 2016 14:04:14 +0000
From: Liyan Cao <lcao@...ollege.com>
To: "john-users@...ts.openwall.com" <john-users@...ts.openwall.com>
Subject: RE: how to use John to create more complex passwords

Hi, Rich,
Thank you!
I got below error. I'm using "John the Ripper 1.8.0 (sources, tar.xz, 4.3 MB)". Any suggestions?

$ ./john -w=mypasswd.lst -rules=single -stdout
Extra parameter for option: "-rules=single"

Thanks,
Liyan

-----Original Message-----
From: Rich Rumble [mailto:richrumble@...il.com] 
Sent: Thursday, August 18, 2016 9:38 AM
To: john-users@...ts.openwall.com
Subject: Re: [john-users] how to use John to create more complex passwords

On Wed, Aug 17, 2016 at 9:22 PM, Liyan Cao <lcao@...ollege.com> wrote:
> Hi,
> I'd like to run John with a password list file to create another file with the passwords at least 8 alphanumeric characters.
> Can you give me a sample with the syntax?
> For example :
> Inside the password.lst, I have:
> Security
> I'd like the new password file to have the words generated from Security:
> Security123
> Secur1ty
> SECURITY
> How do I do that?

the --stdout feature should work:
john -w=password.lst -rules=single -stdout The output from that command could be very large depending on how many lines you have in your password.lst file so if your redirecting that output to a file ( >output.txt) it could get quite large.
You can write your own rules (see RULES in the DOC folder) as well and then specify them instead of the built in rules like "single", "nt", "wordlist" etc..

If you have a password "policy" you want john to use, you can use the external filter or create your own external filter

john -external=policy -w=password.lst -rules=single -stdout

That default policy above is 1 upper, 1 lower and 1 digit, 8 or more in length. If you want specials to be included, the external filter in john.conf will have to be changed to include that.

You can also use the mask mode to append to your wordlist john -stdout -w=password.lst -mask=?w?s?d?d -min-length=5

See MASK doc's for more examples. You can even apply the external filters to that command too :) This too will create a lot of data...
-rich

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.