Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <AANLkTin7gEXQN_XKcoIoS1khN_oTw3afr6lCTcdTzBO3@mail.gmail.com>
Date: Wed, 14 Jul 2010 07:19:50 +0800
From: Kurt Grutzmacher <grutz@...gojango.net>
To: john-users@...ts.openwall.com
Subject: 1.7.6-jumbo-3 breaks john --show --fomat=LM output

The latest jumbo patch for John The Ripper 1.7.6 breaks the --show command
output for LANMAN hashes.

John 1.7.6 release:

$ ./john | head -n1
John the Ripper password cracker, version 1.7.6
$ ./john --show --format=LM ../../test-pw.txt
1234:1234:500:7CE21F17C0AEE7FB9CEBA532D0546AD6:::

1 password hash cracked, 0 left

John 1.7.6-jumbo-3

$ ./john | head -n1
John the Ripper password cracker, version 1.7.6-jumbo-3
$ ./john --show --format=LM ../../test-pw.txt
1234:1234:500:::

1 password hash cracked, 0 left

Patch to fix uses the ciphertext variable instead of line. Enjoy!

--- john-1.7.6-jumbo-3.diff 2010-07-03 13:12:01.000000000 +0800
+++ john-1.7.6-jumbo-3-lmshowfix.diff 2010-07-13 17:52:22.000000000 +0800
@@ -18267,8 +18267,8 @@
 + }
 +
 + if (source) {
-+ if (line)
-+ sprintf(source, "%s:%s", uid, line);
++ if (ciphertext)
++ sprintf(source, "%s:%s", uid, *ciphertext);
 + else
 + sprintf(source, "%s\n", uid);
 + }

--
 Kurt Grutzmacher -=- grutz@...gojango.net

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.