John the Ripper 安装用使用
试着在ubuntu下安装了John the Ripper最新版本１.7.9，非常不给面子，不成功，
总是报"No password hashes loaded"的错误。
最终参照这篇文章，将JRT换成1.7.3.4 版本，让它跑了起来。。。
http://pka.engr.ccny.cuny.edu/~jmao/node/26
简而言之，共有如下步骤
１. 下载JRT 1.7.3.4版
（目前最新版为1.7.9，但1.7.9在ubuntu 10.04上没有跑成功）
网址: http://www.openwall.com/john/
2. 解压
tar -zxvf john-1.7.4.2.tar.gz cd john-1.7.4.2/src
3. 打patch
(这是核心的一步，不打patch,仍然会报No password hash loaded错误)
有三个文件要修改 Makefile, crypt_fmt.c ， john.c.
Append "-lcrypt" to line "LDFLAGS = -s", making the line reads as:
在Makefile中将LDFLAGS = -s改为
LDFLAGS = -s -lcrypt
创建crypt_fmt.c,内容如下
/* public domain proof-of-concept code by Solar Designer */ #define _XOPEN_SOURCE /* for crypt(3) */ #include <string.h> #include <unistd.h> #include "arch.h" #include "params.h" #include "formats.h" #define FORMAT_LABEL "crypt" #define FORMAT_NAME "generic crypt(3)" #define ALGORITHM_NAME "?/" ARCH_BITS_STR #define BENCHMARK_COMMENT "" #define BENCHMARK_LENGTH 0 #define PLAINTEXT_LENGTH 72 #define BINARY_SIZE 128 #define SALT_SIZE BINARY_SIZE #define MIN_KEYS_PER_CRYPT 1 #define MAX_KEYS_PER_CRYPT 1 static struct fmt_tests tests[] = { {"CCNf8Sbh3HDfQ", "U*U*U*U*"}, {"CCX.K.MFy4Ois", "U*U***U"}, {"CC4rMpbg9AMZ.", "U*U***U*"}, {"XXxzOu6maQKqQ", "*U*U*U*U"}, {"SDbsugeBiC58A", ""}, {NULL} }; static char saved_key[PLAINTEXT_LENGTH + 1]; static char saved_salt[SALT_SIZE]; static char *crypt_out; static int valid(char *ciphertext) { #if 1 int l = strlen(ciphertext); return l >= 13 && l < BINARY_SIZE; #else /* Poor load time, but more effective at rejecting bad/unsupported hashes */ char *r = crypt("", ciphertext); int l = strlen(r); return !strncmp(r, ciphertext, 2) && l == strlen(ciphertext) && l >= 13 && l < BINARY_SIZE; #endif } static void *binary(char *ciphertext) { static char out[BINARY_SIZE]; strncpy(out, ciphertext, sizeof(out)); /* NUL padding is required */ return out; } static void *salt(char *ciphertext) { static char out[SALT_SIZE]; int cut = sizeof(out); #if 1 /* This piece is optional, but matching salts are not detected without it */ switch (strlen(ciphertext)) { case 13: case 24: cut = 2; break; case 20: if (ciphertext[0] == '_') cut = 9; break; case 34: if (!strncmp(ciphertext, "$1$", 3)) { char *p = strchr(ciphertext + 3, '$'); if (p) cut = p - ciphertext; } break; case 59: if (!strncmp(ciphertext, "$2$", 3)) cut = 28; break; case 60: if (!strncmp(ciphertext, "$2a$", 4)) cut = 29; break; } #endif /* NUL padding is required */ memset(out, 0, sizeof(out)); memcpy(out, ciphertext, cut); return out; } static int binary_hash_0(void *binary) { return ((unsigned char *)binary)[12] & 0xF; } static int binary_hash_1(void *binary) { return ((unsigned char *)binary)[12] & 0xFF; } static int binary_hash_2(void *binary) { return (((unsigned char *)binary)[12] & 0xFF) | ((int)(((unsigned char *)binary)[11] & 0xF) << 8); } static int get_hash_0(int index) { return (unsigned char)crypt_out[12] & 0xF; } static int get_hash_1(int index) { return (unsigned char)crypt_out[12] & 0xFF; } static int get_hash_2(int index) { return ((unsigned char)crypt_out[12] & 0xFF) | ((int)((unsigned char)crypt_out[11] & 0xF) << 8); } static int salt_hash(void *salt) { int pos = strlen((char *)salt) - 2; return (((unsigned char *)salt)[pos] & 0xFF) | ((int)(((unsigned char *)salt)[pos + 1] & 3) << 8); } static void set_salt(void *salt) { strcpy(saved_salt, salt); } static void set_key(char *key, int index) { strcpy(saved_key, key); } static char *get_key(int index) { return saved_key; } static void crypt_all(int count) { crypt_out = crypt(saved_key, saved_salt); } static int cmp_all(void *binary, int count) { return !strcmp((char *)binary, crypt_out); } static int cmp_exact(char *source, int index) { return 1; } struct fmt_main fmt_crypt = { { FORMAT_LABEL, FORMAT_NAME, ALGORITHM_NAME, BENCHMARK_COMMENT, BENCHMARK_LENGTH, PLAINTEXT_LENGTH, BINARY_SIZE, SALT_SIZE, MIN_KEYS_PER_CRYPT, MAX_KEYS_PER_CRYPT, FMT_CASE | FMT_8_BIT, tests }, { fmt_default_init, valid, fmt_default_split, binary, salt, { binary_hash_0, binary_hash_1, binary_hash_2 }, salt_hash, set_salt, set_key, get_key, fmt_default_clear_keys, crypt_all, { get_hash_0, get_hash_1, get_hash_2 }, cmp_all, cmp_all, cmp_exact } };
John.c中要加两行,红色部分
extern struct fmt_main fmt_DES, fmt_BSDI, fmt_MD5, fmt_BF; extern struct fmt_main fmt_AFS, fmt_LM; extern struct fmt_main fmt_crypt;
john_register_one(&fmt_DES); john_register_one(&fmt_BSDI); john_register_one(&fmt_MD5); john_register_one(&fmt_BF); john_register_one(&fmt_AFS); john_register_one(&fmt_LM); john_register_one(&fmt_crypt);
修改Makefile中JOHN_OBJS_MINIMAL的依赖
JOHN_OBJS_MINIMAL = \ DES_fmt.o DES_std.o DES_bs.o \ BSDI_fmt.o \ MD5_fmt.o MD5_std.o \ BF_fmt.o BF_std.o \ AFS_fmt.o \ LM_fmt.o \ batch.o bench.o charset.o common.o compiler.o config.o cracker.o \ crc32.o external.o formats.o getopt.o idle.o inc.o john.o list.o \ loader.o logger.o math.o memory.o misc.o options.o params.o path.o \ recovery.o rpp.o rules.o signals.o single.o status.o tty.o wordlist.o \ unshadow.o \ unafs.o \ unique.o \ crypt_fmt.o
4. 执行指令
make clean generic
5. 执行John
sudo unshadow /etc/passwd /etc/shadow> shadowfile ./john shadowfile
执行结果
vigar@vigar-laptop:~/software/john-1.7.3.4/run$ ./john shadowfile Loaded 6 password hashes with 6 different salts (generic crypt(3) [?/32]) test (test) aaa (aaa)
...
