I tried to use john the ripper on the sample : ecryptfs_sample_metadata.tar (password is 'openwall')
Which I downloaded from here: https://openwall.info/wiki/john/sample-non-hashes
If i try
sudo john ecryptfs_sample_metadata.tar --progress-every=10 --mask='openwal?l'
The result is:
Warning: detected hash type "mysql", but the string is also recognized as "oracle"
Use the "--format=oracle" option to force loading these as that type instead
Warning: detected hash type "mysql", but the string is also recognized as "pix-md5"
Use the "--format=pix-md5" option to force loading these as that type instead
Using default input encoding: UTF-8
Loaded 1 password hash (mysql, MySQL pre-4.1 [32/64])
Warning: no OpenMP support for this hash type, consider --fork=4
Press 'q' or Ctrl-C to abort, almost any other key for status
0g 0:00:00:00 0g/s 185.7p/s 185.7c/s 185.7C/s openwala..openwalq
Session completed
If I try show I have the result:
0 password hashes cracked, 1 left
I try to ad
--format=oracle
or
--format=pix-md5
with the same result.
Does anyone have an idea why the password is not cracked?