Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Fri, 19 Feb 2010 20:10:20 +0300
From: Solar Designer <solar@...nwall.com>
To: john-users@...ts.openwall.com
Subject: Re: No password hashes loaded - and the pwddump is the same as others

On Fri, Feb 19, 2010 at 08:37:14AM -0800, Anton wrote:
> and i still get this, why it's not cracking all the passwords, primarily the
> real one? When i do initial hashes cracking, it finishes up fine, and
> returns me to the command prompt.

So basically your complaint is that it cracks all of the LM hashes, but
only some of the NTLM ones?  This usually indicates that you did not
rename the [List.Rules:Wordlist] section to something else and the
[List.Rules:NT] section to [List.Rules:Wordlist].  I've just tried
following the instructions correctly and running JtR against your file,
and indeed the NTLM hash for "brr" got cracked.  The password is "Duece27$".

I used a newer version of JtR and I ran this on Linux, but that should
not matter.  It is quite clear that the error was in your john.conf
edits or in the lack thereof.  In newer versions of the jumbo patch, the
"--rules" option accepts the section name, so editing john.conf is no
longer required - but the build for Windows is not recent enough, which
is why I've actually tested the procedure with the section rename.

BTW, it'd be much more efficient to run JtR against all of your files at
once, not against individual files one by one.

Alexander

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.