Differences

This shows you the differences between two versions of the page.

--- john:sample-non-hashes [2014/09/09 17:11]
dhiru EIGRP stuff
+++ john:sample-non-hashes [2020/09/10 14:58] (current)
magnum Link to github repo
@@ Line 1: / Line 1: @@
 ====== Sample non-hashes (to be) supported by JtR ======
+NOTE: We now have a repo https://github.com/openwall/john-samples with all data from here.
+**JtR-jumbo supports way many more hashes (or non-hashes) than that are listed on this page**.
 ===== 1Password "Agile Keychain" =====
@@ Line 9: / Line 13: @@
   * {{john:openwall.agilekeychain.zip}}
-===== Lotus Notes ID files =====
-  * {{:john:sample-notes-id-openwall-64-bit-rc2.zip|}} Sample Notes ID files using 64-bit RC2. Password is "openwall". Created using Lotus 8.5.3.
+===== 7-Zip =====
-  * {{:john:more-notes-id-samples.rar|}} More sample Notes ID files. "admin.id" file is using 128-bit RC2. Created using Lotus 8.5.3.
-===== STRIP password manager =====
+Sample 7-Zip files
-Supported in JtR 1.7.9-jumbo-8 and above.
+  * {{john:7-Zip-samples.tar.gz}}
+  * {{john:test-openwall-sfx.tar|}} Self-extracting 7-Zip file
+  * {{https://github.com/magnumripper/7z-crack/tree/master/check/test|Sample 7-Zip files}}
-  * {{john:strip.db.gz|}} STRIP database. Password is "openwall".
+===== Apple Disk Image files (DMG) =====
+  * {{https://github.com/kholia/VileFault/tree/master/tests|Sample DMG files}}
+New disk images created with a recent version of OSX, including .sparseimage and .sparsebundle which are also used by Apple Time Machine and FileVault (up to Lion)
+  * {{https://github.com/alienjizz/UDIF/blob/master/README.md|}}
+  * {{https://github.com/alienjizz/UDIF|Apple UDIF disk images}}
-===== STRIP 2.1 password manager =====
+===== Bitcoin Core and Bitcoin-based altcoin wallet files =====
-  * {{john:strip-v2.1-openwall_123.db.gz|}} STRIP 2.1 database. Password is "openwall@123".
+Sample Bitcoin Core wallet files
-===== 7-Zip =====
+  * {{john:sample-bitcoin-core-wallets.zip}}
-Sample 7-Zip files
+Sample Bitcoin-based altcoin wallet files
-  * {{john:7-Zip-samples.tar.gz}}
+  * {{john:xdn_wallet.zip}} (DigitalNote [XDN] wallet using new Berkeley DB with btree version 10)
-  * {{https://github.com/kholia/7z-crack/tree/master/check/test|Sample 7-Zip files}}
+===== BitLocker images =====
+  * {{https://github.com/kholia/libbde/tree/bitlocker2john/samples|Sample BitLocker disk images}}
+  * [[OpenCL BitLocker]] tutorial
+===== DHCP authentication packets =====
+Sample DHCP authentication packet captures
+  * {{https://github.com/kholia/my-pcaps/tree/master/DHCPv6|Sample DHCP auth .pcap files}}
+===== eCryptfs =====
+Version 1:
+  * Sample eCryptfs metadata {{john:ecryptfs_sample_metadata.tar}} (password is 'openwall')
+Version 2:
+  * wrapped-passphrase file sample {{john:wrapped-passphrase.zip}} (password is 'openwall')
-===== Apple Disk Image files =====
-  * {{https://github.com/kholia/VileFault/tree/master/tests|Sample DMG files}}
-New disk images created with a recent version of OSX, including .sparseimage and .sparsebundle which are also used by Apple Time Machine and FireVault (up to Lion)
-  * {{https://github.com/alienjizz/UDIF/blob/master/README.md|}}
-  * {{https://github.com/alienjizz/UDIF|Apple UDIF disk images}}
 ===== EFS - Encrypting File System files (Microsoft)=====
   * Sample EFS "files" {{john:efs-samples.tar.bz2}}
+  * EFS "files" from Windows 10 {{john:efs-windows-10.zip}}
   * {{:undefined:usb-efs-jtr.7z|}} File is a 7zip compressed DD image, it's 206Mb in total size only 175Mb used space.
@@ Line 51: / Line 71: @@
   * {{john:eigrp-v1.tar.bz2}}
+===== FreeBSD GELI disk encryption =====
+Sample GELI encrypted disk images
+  * {{:john:geli-samples.zip}} (created on FreeBSD 11.0)
+  * {{:john:geli-samples-old.zip}} (created on FreeBSD 6.0 to 9.3)
 ===== Gadu-Gadu auth packets =====
   * {{:john:gadu-gadu.pcaps.tar.gz}}
 ===== GNOME Keyring =====
@@ Line 91: / Line 118: @@
   * {{john:iSCSI-pcaps.tar.bz2}}
+===== iTunes Backup =====
+Sample iTunes Backup manifest files.
+  * {{john:sample-itunes-backup-manifests.zip}}
+===== Jetico BestCrypt =====
+Sample Jetico BestCrypt Containers
+  * {{john:jetico-sample-containers.tar.xz}}
 ===== KeePass =====
@@ Line 100: / Line 143: @@
   * {{john:KeePass-samples.tar}}
   * {{john:KeePass-more-samples.zip}}
-  * {{john:twofish-twofish.kdb.zip|twofish sample, support for twofish is TODO}}
+  * {{john:twofish-twofish.kdb.zip|twofish sample}}
+  * {{:john:keepass-samples-with-keyfile.tar.bz2|KeePass samples using key file(s)}}
 ===== Kerberos v5 Pre-Authentication =====
@@ Line 110: / Line 154: @@
 [[http://www.securiteam.com/windowsntfocus/5BP0H0A6KM.html]]
+===== Keynote =====
+Supported by https://github.com/magnumripper/JohnTheRipper/.
+  * {{john:keynote_files.zip}}
 ===== KeyStore =====
@@ Line 126: / Line 176: @@
 Sample LastPass files
   * {{john:LastPass_Win32_Examples.zip}}
+===== Lotus Notes ID files =====
+  * {{:john:sample-notes-id-openwall-64-bit-rc2.zip|}} Sample Notes ID files using 64-bit RC2. Password is "openwall". Created using Lotus 8.5.3.
+  * {{:john:more-notes-id-samples.rar|}} More sample Notes ID files. "admin.id" file is using 128-bit RC2. Created using Lotus 8.5.3.
 ===== LUKS =====
@@ Line 159: / Line 217: @@
   * {{john:Keychain-Samples.zip}}
+===== OpenBSD disk encryption =====
+Sample encrypted disk images.
+  * {{:john:bcrypt-pbkdf-openwall12345.raw.zip|}}
 ===== Office =====
+==== Sample files (created using M$ Office 2016) ====
+  * {{john:office_2016_samples.tar.gz}}
@@ Line 184: / Line 253: @@
   * {{john:Oracle-O5LOGON.tar.gz}}
   * {{john:Oracle-Captures.zip}}
+===== Padlock Password Manager =====
+Sample Padlock encrypted databases
+  * {{john:sample-padlock-databases.zip}}
 ===== Password Safe =====
@@ Line 207: / Line 282: @@
   * {{john:MetadataNotEncrypted.pdf|PDF with meta data that hasn't been encrypted}}
   * {{john:challenge8_pro_pdfs.tar.bz2|CMIYC 2013 pro PDF files}}
+  * {{john:pdf_m10500_14_to_16_acrobat_5_to_8.7z|some tests from Hashcat crew}} https://github.com/magnumripper/JohnTheRipper/pull/1052
+  * {{john:pdf_m10400_11_to_13_acrobat_2_to_4.7z|more tests from Hashcat}} https://github.com/magnumripper/JohnTheRipper/pull/1055
+===== PEM =====
+Supported by https://github.com/magnumripper/JohnTheRipper/
+Sample file:
+  * {{john:superfish_komodia.tar.gz|Certificate PEM file, password is komodia}}
 ===== PuTTY's private key files =====
@@ Line 293: / Line 376: @@
 ===== SSH (new format keys, January 2014) =====
-Not supported yet ;(
+Supported by https://github.com/magnumripper/JohnTheRipper/.
 Sample new format SSH private keys (created using ''ssh-keygen''):
   * {{john:openssh-new-format-keys.tar.gz}}
+===== STRIP password manager =====
+Supported in JtR 1.7.9-jumbo-8 and above.
+  * {{john:strip.db.gz|}} STRIP database. Password is "openwall".
+===== STRIP 2.1 password manager =====
+  * {{john:strip-v2.1-openwall_123.db.gz|}} STRIP 2.1 database. Password is "openwall@123".
 ===== TrueCrypt Volumes =====
@@ Line 306: / Line 400: @@
   * {{john:tc-samples.tar.gz}}
+  * {{truecrypt-examples.7z}}
@@ Line 316: / Line 411: @@
   * {{john:vnc-pcaps.zip}}
   * {{john:RealVNC-RFB-3.3-client.zip}}
+===== VRRP MD5 auth packets =====
+Sample VRRP MD5 authentication packet captures
+  * {{:john:vrrp-samples.tar.bz2|}}
+  * {{:john:vrrp-ah.zip|}} (VRRP packets using Authentication Header)
+More samples can be found at https://github.com/kholia/my-pcaps.