Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <CANWtx00k+=heJR4GrCMkkQ-gXewKLRKH8-G_k9MoKamDJGe=KA@mail.gmail.com>
Date: Mon, 28 Oct 2013 06:46:48 -0400
From: Rich Rumble <richrumble@...il.com>
To: john-users@...ts.openwall.com
Subject: Re: Passwords come out in uppercase

On Sun, Oct 27, 2013 at 5:27 PM, Dane Ruyle <dane_ruyle@...mail.com> wrote:
> Hello,I did some searching on the FAQ but did't find the answer to this. Running my 2003 domain hashes through john.exe, it works, but all the passwords it decrypts come our in uppercase.That is, if the password contains a mix of upper and lower case, they are lost after decrypting as the output is in all uppercase.
You're cracking the LM password portion, which is the case insensitive
version. Specify the format "nt" and it will crack the case sensitive
NTLM hashes.
john.exe -format=nt passwords.txt

>From the FAQ (http://www.openwall.com/john/doc/FAQ.shtml)
A: With PWDUMP-format files, John focuses on LM rather than NTLM
hashes by default, and it might not load any hashes at all if there
are no LM hashes to crack. To have JtR Pro or a -jumbo version focus
on NTLM hashes instead, you need to pass the "--format=nt" option.
-rich

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.