2

I am giving John the Ripper a file that may contain duplicate hashes, and get output like this:

2g 0:00:00:01  1.600g/s 3.200p/s 3.200c/s 70227C/s 123456789..abc123

Which represents the total number of unique passwords cracked over time. Is there a way to get total number of passwords (which contains duplicate password counts as well) cracked over time from John's output?

4
  • 1
    You say file that may contain duplicate hashes. Do you really mean duplicate hashes - that is, same password and same hash? Or do you mean duplicate passwords with different hashes? Mar 26, 2018 at 15:10
  • I mean same password with the same hash
    – rkd
    Mar 26, 2018 at 17:12
  • Why don't you strip those out before running the tool? (Duplicate hashes likely means a weak password storage mechanism as salts should make hashes unique.) Mar 26, 2018 at 17:46
  • 1
    Because multiple people can have the same password. Frequency analysis of a given password corpus has significant research value. Mar 26, 2018 at 18:21

1 Answer 1

2

"NoLoaderDupeCheck" attribute in the john.conf file is what i was looking for.

1
  • FYI: It is acceptable to mark your own answer as the right answer. Mar 27, 2018 at 21:05

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.