Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Thu, 3 Sep 2020 21:54:33 +0200
From: Solar Designer <>
Subject: GUI-based attack configuration


Here's a project I hadn't heard of and personally have no use for, but
someone might find useful or relevant as a UI example:

"Mentalist is a graphical tool for custom wordlist generation.  It
utilizes common human paradigms for constructing passwords and can
output the full wordlist as well as rules compatible with Hashcat and
John the Ripper."

This reminded me of the following thoughts I had earlier:

Maybe we should enhance Johnny with optional GUI-based construction of
wordlist rules.

Additionally, now that we support many end-user password recovery use
cases, it's desirable to have some UI (a web page or GUI app?)
comfortable for a typical user to specify whatever they recall about the
password.  It should actively inquire the user about that, as (from my
experience) people may be at a loss on what kind of information to
provide despite of actually having the information.  This should result
in automatic selection of cracking mode(s) to use and configuration of
those.  Ideally, it should also inform the user of the resulting
keyspace and expected attack duration (maybe given a pre-specified speed
that the user can edit).


Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.