[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <512F7298F309D84B9176E6420025C5E115C3790473@exchange.autotrim.local>
Date: Wed, 2 Sep 2009 18:01:01 -0400
From: Kaleb Hosie <kalebh@...essdeniedinc.com>
To: "john-users@...ts.openwall.com" <john-users@...ts.openwall.com>
Subject: RE: Using Cain and Abel Hashes
Alright. For those that are not familiar with Cain and Abel, what it does is you can capture information traveling across the network. When a user logs on to Active Directory, it records the hash. The problem is that it isn't very efficient at cracking hashes (not to mention only for Windows). I've attached a hash as per Alexander's request. The password for this hash is: 2002
The confidential statement is set on the Exchange server and I don't have access.
PS: This email is not confidential (unless you want it to be) :P
________________________________________
From: Solar Designer [solar@...nwall.com]
Sent: Wednesday, September 02, 2009 5:11 PM
To: john-users@...ts.openwall.com
Subject: Re: [john-users] Using Cain and Abel Hashes
On Tue, Sep 01, 2009 at 05:34:25PM -0400, Kaleb Hosie wrote:
> Is there a way to test the security of someone's Active Directory password using the hash gathered from Cain and Abel?
I am not familiar with Cain and Abel; I suspect that only a small
fraction of subscribers to this list are. You might enable more of us
to potentially answer your question by posting a sample of that "hash
gathered from Cain and Abel". If you post the corresponding plaintext
password (a test one indeed), that would work even better. Please
consider doing it. Even if no one ends up answering your question, the
information you'd post (a hash + password combo) could be of some use to
some of those searching the list archives months or years later. ;-)
> This e-mail is confidential.
[...]
Then why did you sent it to a public mailing list? ;-) Seriously, those
confidentiality notices are rather annoying, especially on mailing list
postings. You may want to remove yours if you have any control over it
(I understand that you might not).
Alexander
This e-mail is confidential. If you are not the intended recipient, please notify the sender and delete this e-mail and any attachments without copying, disclosing or retaining it in any form.
Ce courriel est confidentiel. Si vous n'etes pas le destinataire designe, veuillez en informer l'expediteur et supprimer ce courriel ainsi que tous fichiers joints sans les copier, divulguer ou conserver d'aucune facon.
View attachment "KRB5.TXT" of type "text/plain" (131 bytes)
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
