[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <SNT147-W3401949601EF612BDC4C16E9080@phx.gbl>
Date: Mon, 28 Oct 2013 10:02:42 -0700
From: Dane Ruyle <dane_ruyle@...mail.com>
To: "john-users@...ts.openwall.com" <john-users@...ts.openwall.com>
Subject: RE: Passwords come out in uppercase
Hi Rich,
I get -
Unknown ciphertext format name requested
john.exe --format=nt john.exe -format=ntjohn.exe --format=NTjohn.exe -format=NTjohn.exe --format NTLMjohn.exe --format ntlm
There's a lm.... but no nt or ntlm
> Date: Mon, 28 Oct 2013 06:46:48 -0400
> From: richrumble@...il.com
> To: john-users@...ts.openwall.com
> Subject: Re: [john-users] Passwords come out in uppercase
>
> On Sun, Oct 27, 2013 at 5:27 PM, Dane Ruyle <dane_ruyle@...mail.com> wrote:
> > Hello,I did some searching on the FAQ but did't find the answer to this. Running my 2003 domain hashes through john.exe, it works, but all the passwords it decrypts come our in uppercase.That is, if the password contains a mix of upper and lower case, they are lost after decrypting as the output is in all uppercase.
> You're cracking the LM password portion, which is the case insensitive
> version. Specify the format "nt" and it will crack the case sensitive
> NTLM hashes.
> john.exe -format=nt passwords.txt
>
> From the FAQ (http://www.openwall.com/john/doc/FAQ.shtml)
> A: With PWDUMP-format files, John focuses on LM rather than NTLM
> hashes by default, and it might not load any hashes at all if there
> are no LM hashes to crack. To have JtR Pro or a -jumbo version focus
> on NTLM hashes instead, you need to pass the "--format=nt" option.
> -rich
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
