|
Date: Sat, 30 Apr 2022 08:52:04 +0200 From: "Johny Krekan" <krekan@...nykrekan.com> To: "john-users@...ts.openwall.com" <john-users@...ts.openwall.com> Subject: Re: Way to create specific wordlist Hello, I exactly did it yesterday. First using sqllitetools I dumped original database to text. Later I have created simple script which extracted the password part from each line. Then I tested it against one UPC hash which of course could not be cracked using any password from that list (it would be then too much simple: -)) today I can continue forward. Johny > >Rich Rumble richrumble@...il.com >29. 4. 2022 15:20 > >Why not Download the SQLite database that has all the passwords in it >already? >And since it's just the uppercase alphabet letters, you can use >incremental=upper >I dumped the passes from their sql like this: >sqlite SELECT orig from "wifi"; >keys.txt >You could extract those, and create an INCREMENTAL mode based on them, as >the frequency that letters appear near each other might be optimized >better, but I'm not sure with a keyspace this small if it makes a real >difference. The length is 8 (min and max) it won't take long. Bue here is >how you could do this: >Use -make-charset >https://www.openwall.com/john/doc/EXAMPLES.shtml >sed 's/^/:/' < keys.txt >upcubee.pot >./john -pot=upcubee.pot -make-charset=upcubee.chr >Loaded 16777216 plaintexts >Generating charsets........................ DONE >Generating cracking order..---- Stable order (6 recalculations) >Successfully wrote charset file: upc.chr (26 characters) >The .chr file is much smaller than the 151Mb of the plaintext passwords >from that DB they provide. >Add that to your john.conf and then use the incremental mode on it. >[Incremental:upcubee] >File = $JOHN/upcubee.chr >MinLen = 8 >CharCount=26 >../john -i=upcubee hashes.txt >On Thu, Apr 28, 2022 at 8:58 AM Krekan <krekan@...nykrekan.com> wrote: >> Hello, I would like to ask what options of John could I use to make >> wordlist >> which will contain 8 character combinations which can contain each >> character >> only once or twice. For example word specific is not good only for example >> specifgh. Every character from the charset can be used only once or twice >> in >> password candidate. This is useful for testing strength of UPC >> networks >> passwords which are created in such way. >> For more explanation look at: >> >> https://ubee.deadcode.me/index.php?ssid=1042770 >> Example passwords shown there are of a kind which I would like to create >> using >> John. >> Thanx for help >> Johny Krekan >> >> --- >> New Outlook Express and Windows Live Mail replacement - get it here: >> https://www.oeclassic.com/ >>
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.