{"action":"created","issue":{"url":"https://api.github.com/repos/magnumripper/JohnTheRipper/issues/2388","repository_url":"https://api.github.com/repos/magnumripper/JohnTheRipper","labels_url":"https://api.github.com/repos/magnumripper/JohnTheRipper/issues/2388/labels{/name}","comments_url":"https://api.github.com/repos/magnumripper/JohnTheRipper/issues/2388/comments","events_url":"https://api.github.com/repos/magnumripper/JohnTheRipper/issues/2388/events","html_url":"https://github.com/magnumripper/JohnTheRipper/issues/2388","id":202238120,"number":2388,"title":"pdf2john.py generates unrecognized hashes.","user":{"login":"ubitux","id":34467,"avatar_url":"https://avatars.githubusercontent.com/u/34467?v=3","gravatar_id":"","url":"https://api.github.com/users/ubitux","html_url":"https://github.com/ubitux","followers_url":"https://api.github.com/users/ubitux/followers","following_url":"https://api.github.com/users/ubitux/following{/other_user}","gists_url":"https://api.github.com/users/ubitux/gists{/gist_id}","starred_url":"https://api.github.com/users/ubitux/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ubitux/subscriptions","organizations_url":"https://api.github.com/users/ubitux/orgs","repos_url":"https://api.github.com/users/ubitux/repos","events_url":"https://api.github.com/users/ubitux/events{/privacy}","received_events_url":"https://api.github.com/users/ubitux/received_events","type":"User","site_admin":false},"labels":[{"id":51606860,"url":"https://api.github.com/repos/magnumripper/JohnTheRipper/labels/bug","name":"bug","color":"e11d21","default":true}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2017-01-20T20:45:42Z","updated_at":"2017-01-21T12:02:20Z","closed_at":null,"body":"Using LibreOffice I created a pdf with a password but `pdf2john.py` generates unrecognized hashes:\r\n\r\n```\r\n[/tmp]☭ /usr/lib/john/pdf2john.py test.pdf > test.hash\r\n[/tmp]☭ cat test.hash\r\ntest.pdf:$pdf$2*3*128*-1028*1*16*f2e3a4118491798c81904096dbc67300*:::::test.pdf\r\n[/tmp]☭ john test.hash\r\nNo password hashes loaded (see FAQ)\r\n[/tmp]☭ \r\n```\r\n\r\nNotes:\r\n- here `test.pdf` has 2 passwords, \"foo\" and \"bar\" respectively for read and editing according to LibreOffice.\r\n- both `mupdf -p foo test.pdf` and `mupdf -p bar test.pdf` work (but not any other password)\r\n- the issue is reproducible with only one password set\r\n- `pdf2john.py` + `john` seems to work fine with another encrypted pdf I have\r\n\r\n```[/tmp]☭ john --list=build-info\r\nVersion: 1.8.0-jumbo-1 MPI + OMP\r\nBuild: linux-gnu 64-bit AVX-autoconf\r\nArch: 64-bit LE\r\nSystem-wide exec: /usr/lib/john\r\nSystem-wide home: /usr/share/john\r\nPrivate home: ~/.john\r\n$JOHN is /usr/share/john/\r\nFormat interface version: 12\r\nMax. number of reported tunable costs: 3\r\nRec file version: REC4\r\nCharset file version: CHR3\r\nCHARSET_MIN: 1 (0x01)\r\nCHARSET_MAX: 255 (0xff)\r\nCHARSET_LENGTH: 24\r\nMax. Markov mode level: 400\r\nMax. Markov mode password length: 30\r\nCompiler version: 6.2.1 20160830\r\ngcc version: 6.2.1\r\nOpenCL library version: 1.2\r\nOpenSSL library version: 0100020af\r\nOpenSSL 1.0.2j  26 Sep 2016\r\nGMP library version: 6.1.1\t(loaded: 6.1.2)\r\nfseek(): fseek\r\nftell(): ftell\r\nfopen(): fopen\r\nmemmem(): System's\r\n```"},"comment":{"url":"https://api.github.com/repos/magnumripper/JohnTheRipper/issues/comments/274257577","html_url":"https://github.com/magnumripper/JohnTheRipper/issues/2388#issuecomment-274257577","issue_url":"https://api.github.com/repos/magnumripper/JohnTheRipper/issues/2388","id":274257577,"user":{"login":"kholia","id":79528,"avatar_url":"https://avatars.githubusercontent.com/u/79528?v=3","gravatar_id":"","url":"https://api.github.com/users/kholia","html_url":"https://github.com/kholia","followers_url":"https://api.github.com/users/kholia/followers","following_url":"https://api.github.com/users/kholia/following{/other_user}","gists_url":"https://api.github.com/users/kholia/gists{/gist_id}","starred_url":"https://api.github.com/users/kholia/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kholia/subscriptions","organizations_url":"https://api.github.com/users/kholia/orgs","repos_url":"https://api.github.com/users/kholia/repos","events_url":"https://api.github.com/users/kholia/events{/privacy}","received_events_url":"https://api.github.com/users/kholia/received_events","type":"User","site_admin":false},"created_at":"2017-01-21T12:02:20Z","updated_at":"2017-01-21T12:02:20Z","body":"@magnumripper We should try to merge https://github.com/kholia/npdf2john into bleeding-jumbo. I will open a PR soon."}}
{"actor":{"display_login":"kholia"}}