Add authenticator2john.py to extract authenticator app passwords. Closes

 #4893

doc/NEWS

@@ -238,6 +238,10 @@ Major changes from 1.9.0-jumbo-1 (May 2019) in this bleeding-edge version:
   large portion of a mask should be generated on device-side (or completely
   disabling internal mask).  [magnum; 2021]
 
+- Added authenticator2john.py: script to extract and format
+  https://github.com/JeNeSuisPasDave/authenticator app passwords.
+  [Mark Silinio; 2021]
+
 
 Major changes from 1.8.0-jumbo-1 (December 2014) to 1.9.0-jumbo-1 (May 2019):
 

run/authenticator2john.py

@@ -0,0 +1,33 @@
+#!/usr/bin/env python
+
+# This software is Copyright (c) 2021 Mark Silinio <mark.silinio-at-gmail.com>,
+# and it is hereby released under GPL v2 license.
+#
+# Extract and format https://github.com/JeNeSuisPasDave/authenticator app password for cracking with JtR
+# Usage: ./authenticator2john.py <authenticator.data file>
+
+import os
+import sys
+from binascii import hexlify
+
+if len(sys.argv) < 2:
+    print('Usage: ./authenticator2john.py <authenticator.data files>')
+    exit(1)
+
+filenames = sys.argv[1:]
+
+for filename in filenames:
+    bname = os.path.basename(filename)
+    try:
+        f = open(filename, "rb")
+        data = f.read()
+    except IOError:
+        e = sys.exc_info()[1]
+        sys.stderr.write("%s\n" % str(e))
+        exit(1)
+
+    iv = data[:16]
+    encrypted_data = data[16:32]
+    iv = hexlify(iv).decode("ascii")
+    encrypted_data = hexlify(encrypted_data).decode("ascii")
+    sys.stdout.write("%s:$authenticator$0$%s$%s\n" % (bname, iv, encrypted_data))