[prev in list] [next in list] [prev in thread] [next in thread] 

List:       john-dev
Subject:    Re: [john-dev] Default attack format
From:       Mathieu Laprise <mathlaprise () gmail ! com>
Date:       2015-07-30 14:49:59
Message-ID: CAHNEV5RLaVdwPR=6r-_ErUg8xAqcqRvC5SPKpFbR+kqYWv88Rw () mail ! gmail ! com
[Download RAW message or body]

Okay, let's do that. Regarding magnum's approach (background a `john -stdin
hashfile <<< ""` and track the output), I'm trying to parse the output
correctly.
I found the line in core/jumbo :

>     printf("Loaded %s (%s%s%s [%s])\n",
>         john_loaded_counts(),
>         database.format->params.label,
>         database.format->params.format_name[0] ? ", " : "",
>         database.format->params.format_name,
>         database.format->params.algorithm_name);
>
It produces something like Loaded 2 password hashes with 2 different salts
(md5crypt, crypt(3) $1$ [MD5 256/256 AVX2 8x3])
1) Can I rely on the fact that the default format is always written with
this sentence on standard output ?
2) If I can rely on that, I'll use a wildcard regexp "Loaded *
(THEWORDWEWANT[,|SPACE]*)"

[Attachment #3 (text/html)]

<div dir="ltr">Okay, let&#39;s do that. Regarding magnum&#39;s approach (background a \
`john -stdin hashfile &lt;&lt;&lt; &quot;&quot;` and track the output), I&#39;m \
trying to parse the output correctly. <br>I found the line in core/jumbo \
:<br><blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid \
rgb(204,204,204);padding-left:1ex" class="gmail_quote">       printf(&quot;Loaded %s \
(%s%s%s [%s])\n&quot;,<br>               john_loaded_counts(),<br>               \
database.format-&gt;params.label,<br>               \
database.format-&gt;params.format_name[0] ? &quot;, &quot; : &quot;&quot;,<br>        \
database.format-&gt;params.format_name,<br>               \
database.format-&gt;params.algorithm_name);<br></blockquote><div>It produces \
something like <span \
style="font-family:&#39;Monospace&#39;;font-size:9pt;color:#aa0000">Loaded 2 password \
hashes with 2 different salts (md5crypt, crypt(3) $1$ [MD5 256/256 AVX2 \
8x3])</span></div>1) Can I rely on the fact that the default format is always written \
with this sentence on standard output ?<br><div><div>2) If I can rely on that, \
I&#39;ll use a wildcard regexp &quot;Loaded * \
(THEWORDWEWANT[,|SPACE]*)&quot;<br></div></div></div>



[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic