We need to create a JTR rule to combine our hunch about the word navy being included along with our password dictionary.

Using a text editor, we will edit the file /usr/share/john/john.local.conf, e.g.: # leafpad /usr/share/john/john.local.conf

Add the following five lines3 to the bottom of john.local.conf:

[List.Rules:cs4538]

A0"[Nn][Aa][Vv][Yy]"

A0"[Nn][Aa][Vv][Yy][!*$@]"

Az"[Nn][Aa][Vv][Yy]"

Az"[Nn][Aa][Vv][Yy][!*$@]"

Note, there are no spaces or letter O in these rules

16. Explain the purpose of each of the 5 lines above4 .

Now that weve created the rule, lets see if JTR is generating the passwords we want.

Create a new file named word that contains just your first name, e.g. a file containing only the text Bertrand.

Run: # /usr/sbin/john --wordlist=word --rules=cs4538 --stdout |less

17. How many different permutations of your name has the cs4538 JTR rule created?

18. How large is our full dictionary (W = /usr/share/john/password.lst) if we expand it using our cs4538 permutation rules in JTR?