Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20241029041107.GA21101@openwall.com>
Date: Tue, 29 Oct 2024 05:11:07 +0100
From: Solar Designer <solar@...nwall.com>
To: john-users@...ts.openwall.com
Subject: Re: Markov phrases in john

On Mon, Oct 28, 2024 at 11:46:45PM -0400, Matt Weir wrote:
> Looking through this more, my guess is that the output of this Sed script
> needs to be put into potfile format so I can use --make-charset on it, (vs.
> using it to generate a .chr file directly).

Yes, exactly.  Something like:

sed '...lots of stuff here...' TRAINING_PASSWORDS.txt | sed 's/^/:/' > fake.pot
./john --make-charset=custom.chr --pot=fake.pot

> I can then have
> incremental=tokenize to generate "encoded" guesses which I then need to run
> through the JtR external mode to convert into actual password guesses.

Yes, which is normally done in that same invocation, like this:

./john --incremental=custom --external=untokenize --format=nt pwfile

You can redirect the output of tokenize.pl right into john-local.conf
for the above command to work.

> Side note: This is a weird edge case so very low priority request, but one
> thing this made me realize is that it would be nice to use the
> --make-charset option on a set of training passwords vs.a potfile to remove
> a step in the generation process. That's just me being lazy though, and
> I'll admit this is a task that is rare enough that optimizing it doesn't
> provide much value.

Yes, I agree this is something for us to improve.

> > Step 3) Create entry in John.conf for the new charset. Example:
> > [Incremental:Tokenize]
> > File = $JOHN/tokenize.chr

You may, or you may simply use the pre-defined Custom mode, so no edits
are needed.

Alexander

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.