[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <4c0f98b7fdf44754fb553274a1f8dab5@smtp.hushmail.com>
Date: Thu, 31 Oct 2024 13:27:25 +0100
From: magnum <magnumripper@...hmail.com>
To: john-users@...ts.openwall.com
Subject: Re: Markov phrases in john
On 2024-10-30 03:21, Matt Weir wrote:
> I published a blog post explaining the new tokenizer attack works as well
> as detailing instructions on how to configure and run it. Link:
> https://reusablesec.blogspot.com/2024/10/running-jtrs-tokenizer-attack.html
Good stuff (not only the blog post but this whole thread). Perhaps
stating the obvious, you need to ensure the original wordlist is pure
ascii, or any parts of UTF-8 and/or legacy codepage stuff will be
erroneously detokenized.
BTW shouldn't the sed stuff all be /g? As in "s/me/\xa1/g;". If not,
words like "meme" or "james+me" would only have the first instance
tokenized, which I assume is not what we want.
magnum
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
