[SOLVED] john from slackbuild

SeRi@lDiE · 08-31-2011, 12:50 PM

Is John The Ripper from slackbuilds crippled? Or has it been that long that it has changed....?

I am trying to run unshadow and is not in the system. I looked at the build and is not in the build... :?

ponce · 08-31-2011, 01:23 PM

it builds fine here: which build scripts are you using?
for building, have you switched to root with "su -"? you should use that instead of the simple "su".

SeRi@lDiE · 08-31-2011, 01:47 PM

Quote:

Originally Posted by ponce

it builds fine here: which build scripts are you using?
for building, have you switched to root with "su -"? you should use that instead of the simple "su".

ponce,

Thanks for the reply. My issue is not with building it but with a tool missing which is "unshadow"

ponce · 08-31-2011, 02:09 PM

unafs, unique and unshadow are just symlinks to the john binary, try launching them with their full path

Code:

/usr/lib/john/unshadow ...

(/usr/lib64/john/unshadow if you are on 64bit)

SeRi@lDiE · 08-31-2011, 02:22 PM

Quote:

Originally Posted by ponce

unafs, unique and unshadow are just symlinks to the john binary, try launching them with their full path

Code:

/usr/lib/john/unshadow ...

(/usr/lib64/john/unshadow if you are on 64bit)

ah ic.

Works now.

Thanks.

ponce · 08-31-2011, 02:28 PM

should be safe (no binary overlapping here on a slackware full install) also to apply this small patch to the slackbuild to not have to specify the full path

Code:

--- john.SlackBuild.orig        2011-08-31 21:23:52.000000000 +0200
+++ john.SlackBuild     2011-08-31 21:26:04.000000000 +0200
@@ -73,9 +73,12 @@
 cat << EOF > $PKG/usr/bin/john
 #!/bin/sh
 # John The Ripper launcher
-/usr/lib${LIBDIRSUFFIX}/john/john "\$@"
+/usr/lib${LIBDIRSUFFIX}/john/\$(echo \$0 | cut -d/ -f4) "\$@"
 EOF
 chmod 0755 $PKG/usr/bin/john
+ln -s /usr/bin/john $PKG/usr/bin/unafs
+ln -s /usr/bin/john $PKG/usr/bin/unique
+ln -s /usr/bin/john $PKG/usr/bin/unshadow
 
 find $PKG | xargs file | grep -e "executable" -e "shared object" | grep ELF \
   | cut -f 1 -d : | xargs strip --strip-unneeded 2> /dev/null || true

SeRi@lDiE · 08-31-2011, 03:06 PM

Sweet Thanks!

wargus · 08-31-2011, 06:05 PM

It is kind of strange with John, when I simply run the john command, there is no output while pressing enter on the cli like this

Code:

# john --restore=rockyou     
Loaded 651 password hashes with 489 different salts (Traditional DES [128/128 BS SSE2-16])
Remaining 163 password hashes with 152 different salts

but when I write the whole path, there is a list of guesses... something like this

Code:

# /usr/lib64/john/john --restore=rockyou     
Loaded 651 password hashes with 489 different salts (Traditional DES [128/128 BS SSE2-16])
Remaining 163 password hashes with 152 different salts
guesses: 40  time: 143:01:08:16  c/s: 2314K  trying: b1ch61dc - b1ch61p3

note the line after Remaining 163 password hashes...
I've installed the newest slackbuild on 13.37... I wonder where the difference is because

Code:

/usr/bin/john

is a script

Code:

#!/bin/sh
# John The Ripper launcher
/usr/lib64/john/john "$@"

so as far as I understand it runs the same binary