Hello. I'm trying to make process of restoring John the Ripper's .rec files. Instead of typing whole command:

john --restore=record | aircrack-ng -w - -b 00:11:22:33:44:55 record.cap

I tried with bash script:

#!/bin/bash

sudo john --restore=record | aircrack-ng -w - -b 00:11:22:33:44:55


It works as it is but...

John has a feature of showing where process of aircracking is when you press any button. Also, when you press q button it saves where it stopped and quits. None of that works when started with script. Only thing I can press and get response is Ctrl + C to quit the process.

Question is can I start process using bash script so it starts exactly the same way as it would if it was started by command only, so the process would react to key presses?

TIA

sudo valid only before pipe, so aircrack was executed as current user.
You ought to try:
sudo your_bash_script
and bash script contains:
john --restore=record | aircrack-ng -w - -b 00:11:22:33:44:55 record.cap

Probably that helps

It doesn't help. With or without sudo in script it's the same problem.

As I said. Script runs but John the Ripper's "hotkeys" are disabled.

You might check the documentation.

It is possible that the program opens /dev/tty directly to implement that, and sudo by default disables terminal access.

Did you ever solve this? My script to call John with different wordlists does not allow the hotkeys to work either, and I'm not using sudo.

When you run john from the command line the virtual terminal is the shell. But each script has its own shell. Thus, hot keys in the virtual terminal do not affect john called from the script. I don't know of any easy way around this.

Interesting. How do other binaries accept user input when ran inside a script? e.g. it works with nmap

I believe it's the way the key capture is implemented. But I'm not an expert.

Nmap just reads stdin/stdout. sudo does not, its use for password authentication opens /dev/tty to bypass possible spoofs.

Your use of piping the output john to aircrack-ng doesn't really make sense, no input to aircrack will be accepted.

Note: using the pipe separates the sudo command from aircrack - so aircrack will only run under your original account, not as root (or what is specified for john in the sudo configuration file).

to jpollard: TimewarpUK reopened an old, abandoned thread.
Usually binaries inherit stdin/stdout/stderr from their parent processes, so for example nmap will read stdin as long as it runs and bash will read it again when nmap completed (this is not the whole story, but in short you can imagine something like this).

As it was explained sudo does not rely on it, but uses the terminal (/dev/tty) directly which will not work if actually there was no terminal available.

1 members found this post helpful.