[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20100120114153.GA11021@openwall.com>
Date: Wed, 20 Jan 2010 14:41:53 +0300
From: Solar Designer <solar@...nwall.com>
To: john-users@...ts.openwall.com
Subject: Re: john 1.4.2 with jumbo patch 1 - lm hash problem
On Tue, Jan 19, 2010 at 07:59:55PM -0600, Greg White wrote:
> Administrator:500:CEEB0FA9F240C200417EAF40CFAC29C3:D280553F0103F2E643406517296E7582:::
[...]
> The administrator LM password should be TESTTEST.
Well, you made a typo in the LM hash. With it corrected to
CEEB0FA9F240C200417EAF50CFAC29C3 (the correct hash for "TESTTEST"), it
gets cracked just fine.
> Also I used to use john -f:nt hash.txt to tell john to use the NTLM algorithm. In 1.4.2 I have to use john --format:nt hash.txt. Is this change on purpose?
(You probably meant 1.7.4.2-jumbo-1, not 1.4.2.)
This is caused by the addition of new options starting with the letter
"f" in recent jumbo patches (1.7.4-jumbo-2 and above). In general, as
more options are being added, some abbreviations for old options will
stop working (and you'll have to be typing more of the characters -
e.g., at least "-fo" as an abbreviation for "--format"). If we happen
to drop or rename some of those new options, then some old abbreviations
might start working again.
Thank you for testing the new version so promptly and for reporting the
problem in here (I found your posting useful even though the problem
turned out to be a user error).
Alexander
P.S. You could want to avoid running JtR as root. It does not require
root privileges.
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
