Comments (10)
It might also be helpful to modify docker-entrypoint.sh
to give access to the conversion scripts instead of needing to use docker run --entrypoint=...
.
from john-packages.
Thank you for participating.
I agree that a new image can be useful but I'm afraid it can be overwhelming, I mean that to be used by all 2john tools we need python, perl, ruby, node and lua. Would this large image be used?
Anyway, we will keep thinking and discussing how users would use it and how we can improve (probably create a new) image.
from john-packages.
Looking through the scripts in https://github.com/openwall/john/tree/bleeding-jumbo/run, it seems we need only Python, Perl, and Ruby. mongodb2john.js
is for use with the mongo
command from MongoDB (which I don't think we would want to include in an image!) and the network2john.lua
is to be run by tshark
.
from john-packages.
It looks like adding the scripting languages adds about 54% to the image size:
REPOSITORY TAG IMAGE ID CREATED SIZE
ghcr.io/kc9jud/john latest-script 7bfefac15c1b 47 seconds ago 386MB
ghcr.io/openwall/john latest bf99e8de2299 12 days ago 251MB
The build log is consistent, with the additional layer being 135.45 MB.
from john-packages.
from john-packages.
@solardiz, @magnumripper do you guys have anything to say about this?
What would be the best for a random user?
wget script.py && python script.py
(requires to run pip, sometimes).docker run -v [...] john 2john-tool /host/archive > hashes.txt
(requires to be ok with docker tools and to download 300MB).
For example, I do not intend to add "libraries" to distro packages like the Ubuntu snap. The idea is keep everything small and simple as it could be. That said:
- I use the snap packaged scripts in my machine like
/snap/john-the-ripper/current/run/2john-tool archive > hash.txt
because it is simple and good to me. - I never did the same using the docker image. The syntax would be clunky.
Not a lot of people uses john's Docker image. I agree that a new Docker image aimed only at 2john tools would be interesting because people would have something able to handle all these conversions without any software installation.
[edited]
The question is, is anyone interested in having it?
from john-packages.
I really have no idea. Perhaps raise the topic on john-users and see what response we get?
from john-packages.
The question is, is anyone interested in having it?
It looks like @kc9jud is? I think it makes sense to listen to the (very few) users we have for this, and especially to prospective contributors.
from john-packages.
It looks like @kc9jud is?
@kc9jud, please make a PR so we can review and accept it.
from john-packages.
I'm afraid I want to concentrate on the use case where the executables are the focus, without having to test or worry about installing programming language(s) and packages needed by the 2john
tools.
In this way, the packages present in this repository serve to run a real cracking session (safely, sand boxed, without internet access, away from your files/secrets dealing only with a 'hash', ...). All preparation for running john
can be done with the help of the package, but that would NOT be the goal.
I regret to inform I'm going to close this as "wontfix".
from john-packages.
Related Issues (20)
- Proposal: improve release listing
- Remove the 'tag a Docker image' action
- Stop building SSE2 binaries for Docker, snap, and flatpak packages
- Add arm64 Docker image (with NVIDIA GPU support)
- Attract contributors (at least one more)
- Migrate our Intel OpenCL CPU CI tests to the new driver
- Add "verification" to Flathub
- Maybe stop using 7z HOT 8
- Document how the Bitrise file differs from what was committed
- Refactor, use pinned dependencies and more auditability HOT 3
- Rename requirements.txt to requirements.hash
- compress-raw-lzma-perl No longer exists HOT 4
- configuring snap version via john.conf HOT 7
- Add automatic Virus Total Scan HOT 2
- Announce john-packages to john-users HOT 1
- Add OpenSSF Best Practices HOT 16
- Drop donation badges/links HOT 3
- john AI integration HOT 4
- Mute linter and split on spaces HOT 1
- Add support for NVIDIA GPUs in Docker Image
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from john-packages.