4

If I want to create a wordlist, using JTR to mangle a source list by applying its default rules to them I can do this like so:

# john -rules --stdout --wordlist=/usr/share/wordlists/rockyou.txt | head
Press 'q' or Ctrl-C to abort, almost any other key for status
123456
12345
123456789
password
iloveyou
princess
1234567
rockyou
12345678
abc123

However, if I want to apply non-default rules to the wordlist, John doesn't like it:

# john --rules=Jumbo --stdout --wordlist=/usr/share/wordlists/rockyou.txt | head
Extra parameter for option: "--rules=Jumbo"

This ruleset works fine when cracking hashes:

john hashes.txt --wordlist=/usr/share/wordlists/rockyou.txt --rules=Jumbo

Why can't John apply the rules to the wordlist and output a list rather than only being able to crack using a rulesset such as Jumbo?

Or am I missing something?

1
+50

I just tried it and it works fine for me. Make sure you have a new JtR. I'm using 1.8.0-jumbo

sample output:

./john -rules:Jumbo -w:password.lst --stdout | head 
Press 'q' or Ctrl-C to abort, almost any other key for status
123456789
password
  • Could you post your sample output? Thanks – SilverlightFox Nov 21 '16 at 19:03
  • This does not provide an answer to the question. To critique or request clarification from an author, leave a comment below their post. - From Review – Xander Nov 21 '16 at 19:41
  • Can I do preformated output in comments? – Marcin Nov 21 '16 at 19:43
  • 1
    @Xander: Now that it includes sample output, I'd say this was an acceptable answer. Previously though, I'd agree and say it was more appropriate for a comment. – SilverlightFox Nov 23 '16 at 9:52
  • @Marcin - Just tried it again and it appears to be working. Even the exact syntax I posted above in my question now works. Confusing indeed. I'm using 1.8.0-jumbo as before. – SilverlightFox Nov 23 '16 at 9:53

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.