[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20090327014439.GA9951@openwall.com>
Date: Fri, 27 Mar 2009 04:44:39 +0300
From: Solar Designer <solar@...nwall.com>
To: john-users@...ts.openwall.com
Subject: Re: --make-charset against a File with LANMAN and NTLM Passes?
On Thu, Mar 26, 2009 at 02:47:58PM -0500, Minga Minga wrote:
> I am attempting to make a new charset based on the output from
> PWDUMP/FGDUMP. The file contains approx. 50000 accounts, 7000 of which have
> LANMAN and 43000 of which are NTLM only.
>
> When I run:
>
> john --make-charset=mingakore.chr pwdump.txt
>
> It only uses the cracked lanman hashes to create the mingakore.chr file -
> and not the NTLM ones.
Yes, indeed. That's because by supplying the password file (pwdump.txt)
you're asking JtR to filter the john.pot contents making use of only
hashes found in that password file, and JtR tends to only auto-detect LM
hashes in the file.
> Is there a way to make --make-charset use the NTLM and ignore the LANMAN
> hashes? I've tried removing the LANMAN hashes from the input file to no
> avail.
If your build of JtR supports NTLM, then try adding "--format=nt" to the
above command.
If your build of JtR doesn't support NTLM or/and you don't mind JtR
picking up all hashes at once (not just NTLM and not just those from the
specific password file), then simply omit the password file name - keep
"--make-charset=..." as the only command-line option you pass.
Please let the list know which of these approaches (or another one) you
ended up using, and whether it worked.
Thanks,
Alexander
--
To unsubscribe, e-mail john-users-unsubscribe@...ts.openwall.com and reply
to the automated confirmation request that will be sent to you.
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
