[28028] in bugtraq

home help back first fref pref prev next nref lref last post

Cracking OpenVMS passwords with John the Ripper

daemon@ATHENA.MIT.EDU (Jean-loup Gailly)
Wed Nov 27 15:05:02 2002

MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-ID: <15843.44337.462609.218604@home.gailly.net>
Date: Tue, 26 Nov 2002 18:19:45 +0100
From: Jean-loup Gailly <jloup@gailly.net>
To: bugtraq@securityfocus.com
Reply-To: Jean-loup Gailly <jloup@gailly.net>

I have written a patch for John the Ripper http://www.openwall.com/john/
to allow cracking OpenVMS (Vax and Alpha) passwords.  The patch is based on
code from Shawn Clifford, Davide Casale and Mario Ambrogetti.

The sources are in http://jl.gailly.net/security/john-VMS-patch.tar.gz
A README file is at http://gailly.net/security/john-VMS-readme.html
or in ascii at http://jl.gailly.net/security/README.VMS

This patch has been tested on x86 only and does not work yet on big endian
systems. It uses asm code for speed but a portable C version is included as
well. The asm version checks about 150,000 passwords per second on a 1 GHz
system. Password cracking is much easier on OpenVMS than on other systems
since passwords are not case sensitive and limited to alphanumeric,
'$' and '_' only.

Jean-loup Gailly
http://gailly.net/security/

home help back first fref pref prev next nref lref last post