Crack 5 - dictionary mangle rules

[Daniel R Ehrlich]

I am unsure if I really understand how the dictionary magling rules in crack5
are to be interpreted. The simple ones are, well, simple:

/lsl1 match any word with a 'l' and replace all 'l's with '1'.

What I am confused about are rules that conatin more than one match. Are the
matches and'ed together? What does this rule do?

/lsl1/asa2l

Any help would be appreciated.

Thanks,
Dan Ehrlich

--
Dan Ehrlich - Systems Analyst - PSU Computer Science and Engineering
"Universities should be safe havens where ruthless examination of realities
will not be distorted by the aim to please or inhibited by the risk of
displeasure." - Kingman Brewster

[Alec Muffett]

ehr...@daneel.cse.psu.edu (Daniel R Ehrlich) writes:

> What I am confused about are rules that conatin more than one match. Are the
> matches and'ed together? What does this rule do?
>
> /lsl1/asa2l
>

* Selects only words containing a "l" and swaps it for "1".
(Rejects words that don't match)

* Selects only words (from those which survived the first step)
containing a "a" and swaps it for "2". Rejects words that don't match.

* Force the resultant crap to lowercase.

Thus "ALEC" -> "21ec", but "Erlich" and "Dan" will get dropped, since
one doesn't contain "a", and the other doesn't contain "l". 8-)

- alec

--
# If you e-mail a reply to this message, please modify the "To:" address.
# alec muffett, oxford, uk - http://www.users.dircon.co.uk/~crypto/
# below: password cracker in one line of perl; echo guess | perl [args]
perl -nle 'setpwent;crypt($_,$c)eq$c&&print"$u=$_"while($u,$c)=getpwent'

[Alec Muffett]

Alec Muffett <al...@crypto.dircon.co.uk%antispam> writes:

> * Force the resultant crap to lowercase.
>
> Thus "ALEC" -> "21ec", but "Erlich" and "Dan" will get dropped, since
> one doesn't contain "a", and the other doesn't contain "l". 8-)

Actually - I'm wrong... the rule for "ALEC" -> "21ec" would have to
lowercase the word *first*, and then do the substitutions, etc, since
the matching is case-sentitive.

I suppose I should look into this, and see where I've goofed up
similarly in the v5.0 rulesets.

<sigh> - bang goes another weekend.

[Leareth]

>> What I am confused about are rules that conatin more than one match. Are the
>> matches and'ed together? What does this rule do?
>> /lsl1/asa2l
>* Selects only words containing a "l" and swaps it for "1".
> (Rejects words that don't match)

ooo! we can come up with filters for kiddie warez pup 3l33+3 speak.

hmm... /isi1/asa4/ese3/tst+/oso0l

>8-)

--

### http://www.rpi.edu/~hallm4 #####
######## lea...@rpi.edu #####
#### ### devil and the deep blue sea behind me ######
######## vanish in the air you'll never find me #######
###### i will turn your face to alabaster #### ###
##### when you find your servant is your master ########
### The Police #####

[robert]

hal...@marcus.its.rpi.edu (Leareth):

>ooo! we can come up with filters for kiddie warez pup 3l33+3 speak.

You misspelled '31337'

robert

PS: ftp.il.ft.hse.nl:/pub/filters/krad.l :)

[A.M.Zoia]

Daniel R Ehrlich <ehr...@daneel.cse.psu.edu> (writes in news) scritto
nell'articolo <5ah2m7$i...@daneel.cse.psu.edu>...

> I am unsure if I really understand how the dictionary magling rules in
crack5

> are to be interpreted......................

A ''feedback check'' may be useful:

1) run from crack5 home 'run/<somedirs ...>/kickdict -list' and you get
all rules applyed on your dicts.
You are able to localize the number of any rule.

2) run from crack5 home 'run/<somedirs ...>/kickdict NUMBER' where NUMBER
is the rule number that you want to investigate.
You will obtain ALL the dictionary words filtered by crack rules and you
can see what the (damn) rule makes.

NOTE: <somedirs....> is the directory where crack5 stores the executables,
sorry but i can't remember it now.

I suggest you to use a little dictionary for test becouse the output of 2nd
command may be very long.

I have used this metodology to clarify my mind about crack rules.