Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-Id: <150C37F0-5DA9-4D9C-B2CA-99AF8CB20AF3@sl-chat.de>
Date: Wed, 23 Dec 2009 10:24:42 +0100
From: SL <auditor@...chat.de>
To: john-users@...ts.openwall.com
Subject: Re: JTR and format NTLM

Am 2009-12-22 um 23:26 schrieb Solar Designer:
> Depending on how you format the file (PWDUMP-like
> or Unix passwd-like), you may need to specify the "--format=nt"  
> option.

Indeed. If I don't know of what type a certain hash is, or if I have  
a file with several mixed hash types, I usually do a quick run of all  
available types:

# cat madfran.pwdump
Administrator: 
500:AAD3B435B51404EEAAD3B435B51404EE:A82FF8E15A18E4E7399D231E9B32157F:::
# ./john | grep "force hash type" | sed "s/.*: //" | tr -s "/" "\n" |  
while read format; do echo "$format:"; ./john --single -- 
format="$format" madfran.pwdump; done
DES:
No password hashes loaded
BSDI:
No password hashes loaded
MD5:
No password hashes loaded
BF:
No password hashes loaded
AFS:
No password hashes loaded
LM:
Loaded 1 password hash (LM DES [128/128 BS AltiVec])
guesses: 0  time: 0:00:00:00 100.00% (ETA: Wed Dec 23 10:16:08 2009)   
c/s: 8800  trying: ADMIFIS - ADMINIZ
NT:
Loaded 1 password hash (NT MD4 [32/32])
guesses: 0  time: 0:00:00:00 100.00% (ETA: Wed Dec 23 10:16:08 2009)   
c/s: 28975  trying: adminissrator - adminiszrator
XSHA:
No password hashes loaded
PO:
No password hashes loaded
raw-MD5:
No password hashes loaded
MD5-gen:
No password hashes loaded
IPB2:
No password hashes loaded
raw-sha1:
No password hashes loaded
md5a:
No password hashes loaded
hmac-md5:
No password hashes loaded
phpass-md5:
No password hashes loaded
KRB5:
No password hashes loaded
bfegg:
No password hashes loaded
nsldap:
No password hashes loaded
ssha:
No password hashes loaded
openssha:
No password hashes loaded
oracle:
No password hashes loaded
MYSQL:
No password hashes loaded
mysql-sha1:
No password hashes loaded
mscash:
Loaded 1 password hash (M$ Cache Hash [Generic 1x])
guesses: 0  time: 0:00:00:00 100.00% (ETA: Wed Dec 23 10:16:09 2009)   
c/s: 19316  trying: adminissrator - adminiszrator
lotus5:
Loaded 1 password hash (Lotus5 [Lotus v5 Proprietary])
guesses: 0  time: 0:00:00:00 100.00% (ETA: Wed Dec 23 10:16:09 2009)   
c/s: 15685  trying: adminiszrator
DOMINOSEC:
No password hashes loaded
NETLM:
No password hashes loaded
NETNTLM:
No password hashes loaded
NETLMv2:
No password hashes loaded
NETHALFLM:
No password hashes loaded
mssql:
No password hashes loaded
mssql05:
No password hashes loaded
epi:
No password hashes loaded
phps:
No password hashes loaded
mysql-fast:
No password hashes loaded
pix-md5:
No password hashes loaded
sapG:
No password hashes loaded
sapB:
No password hashes loaded
md5ns:
No password hashes loaded
HDAA:
No password hashes loaded


Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.