--show does not output password

[A-Kazak]

Greetings!

John the Ripper 1.9.0-jumbo-1+bleeding-126b2a4814 2025-01-28 23:51:55 +0100 OMP [cygwin 64-bit x86_64 AVX AC]

I run
john --format=7z-opencl --mask=abc$1$1$1$1$1$1$1$1$1$1$1$1$1 -1=[0-9\-!@#$%^&*\(\)] -min-len=9 -max-len=15 test1.7z.hash

it finished successfully with

1g 0:00:00:13 DONE (11) (2026-02-14 18:33) 0.07383g/s 283.5p/s 283.5c/s 283.5C/s abc#%1..abc()4
Use the "--show" option to display all of the cracked passwords reliably
Session completed.

However,
john --format=7z-opencl --show --pot=john.pot test1.7z.hash shows

0 password hashes cracked, 1 left

What am I doing wrong?

[magnumripper]

I run john --format=7z-opencl --mask=abc$1$1$1$1$1$1$1$1$1$1$1$1$1 -1=[0-9\-!@#$%^&*\(\)] -min-len=9 -max-len=15 test1.7z.hash

You probably want the mask to be --mask=abc?1?1?1?1?1?1?1?1?1?1?1?1?1 with questionmarks instead of dollarsigns.

[A-Kazak]

Good catch! Actually it works even with $ signs.
However I will run the revised version again an report here.

[magnumripper]

Actually it works even with $ signs.

No it doesn't. You may get something but not what you intended. Dollarsigns has a special meaning to your shell.

[solardiz]

@A-Kazak If this is for real, then your cracked password must have been printed just above the line 1g 0:00:00:13 DONE (11) (2026-02-14 18:33) 0.07383g/s 283.5p/s 283.5c/s 283.5C/s abc#%1..abc()4. You do not have to use --show, although yes we recommend that you do and it is puzzling why it didn't work.

However, besides the $ vs. ? puzzle, that line I quoted is inconsistent. You requested the range of lengths from 9 to 15 and quite a number of different characters to test. It'd have taken ages for it to advance from length 9 to length 11 with those. But it says it's succeeded in 13 seconds while testing length 11 already. It also lists a range of candidate passwords it was testing at the time, and those are length 6.

So I think we're looking at an AI slop, not at actual usage of john. Correct?

[A-Kazak]

@magnumripper
I am running on Windows 11 CMD.
I followed the example at https://github.com/openwall/john/blob/bleeding-jumbo/doc/MASK which suggests to use --mask= with ? instead of $. I tried to switch from ? to $, but had weird results.

@solardiz
You are right, the cracked password was printed just above the line. However, I want to learn the way to use --show.

The example was just for testing purpose. I test it with two RTX 6000 Ada, so it does not take too much time.
How can share the hash and the correct password here?

[magnumripper]

two RTX 6000 Ada, so it does not take too much time.

For 7z with that mask it should take years anyway. Also per your command line you only used one of the GPUs.

john --format=7z-opencl --show --pot=john.pot test1.7z.hash

Try dropping the --pot=john.pot option from this command line, as you didn't seem to use it for the attack.