[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <CANWtx01-hzUKvbtNMyH_f+56s=D-BUNt3vKhx90bTs-mY4cuPQ@mail.gmail.com>
Date: Thu, 13 Sep 2012 00:59:50 -0400
From: Rich Rumble <richrumble@...il.com>
To: john-users@...ts.openwall.com
Subject: Re: Help for JTR
On Wed, Sep 12, 2012 at 11:10 PM, Jonathan Xiao
<bravowarrior5203@...il.com> wrote:
> "no passwords found in here" means that john did not get any results after
So it did load and attempt to find them, good.
> The hash input to john is as follows:
> adm:1003:f5ed24301452410f0f802f643692aaef:3c4ac740fc1ecbee5da191a14f0cdc29:::
> "f5ed..." is the LM hash and "3c4ac..." is the nt hash, i think.
Again these do load just fine, and you can see why a line that
contains 2 different password hash types, where Jtr has to pick on
over the other, and why it defaults to one (LM) and why NT needs to be
specified.
> I was reading some posts online that john can't decode if the password is
> more than 8 characters long. Is this true?
To a certain extent, the Incremental mode is/was limited to the 8
characters total, other modes like wordlist mode or single crack, will
go to the maximum length Jtr has defined in the conf file, or some
hash limits that may be hard coded. While the NTLM hash can
technically be 127 characters in length, Jtr last we disscussed it,
was limited to 26. So words in your wordlist that exceed 26 characters
will be truncated at that point. Read up on the different modes to see
why Incremental is limited 8, it's essentially a better educated
bruteforce.
Also note that LM hashes are limited to 7 characters only, and are
uppercase. LM contains two 7 character halves to make a total length
of 14 possible. But in reality it's 2.:f5ed24301452410f
0f802f643692aaef then the NT hash is a single hash.
Jtr is aware of password length limitations such as those of LM, and
so words or candidate passwords that exceed 7 are truncated in LM's
case.
http://openwall.info/wiki/john
http://openwall.info/wiki/john/mailing-list-excerpts
-rich
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
